CVE-2014-8366

2014-10-2018:00:00

mitre

www.cve.org

cve-2014-8366

sql injection

opensis.

AI Score

8.5

Confidence

Low

EPSS

0.002

Percentile

59.9%

JSON

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

References

packetstormsecurity.com/files/127284/openSIS-5.3-SQL-Injection.html

seclists.org/fulldisclosure/2014/Jun/151

secunia.com/advisories/59114