Sql injection

2018-06-1919:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

JSON

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.

CPENameOperatorVersion
esp_hr_managementeq4.4.0

CPE	Name	Operator	Version
	esp_hr_management	eq	4.4.0

References

labs.asteriskinfosec.com.au/cve/ConnX_ESP_HR.pdf