CVE-2014-4858

2014-07-2610:00:00

certcc

www.cve.org

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

46.5%

JSON

Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.

References

www.kb.cert.org/vuls/id/394540

www.securityfocus.com/bid/68899