Sql injection

2017-10-1820:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.8%

JSON

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field.

CPENameOperatorVersion
winpat_portaleq3.6.1.0
winpat_portaleq3.2.0.1001

CPE	Name	Operator	Version
	winpat_portal	eq	3.6.1.0
	winpat_portal	eq	3.2.0.1001

References

bogner.sh/2015/09/winpat-portal-3-unauthenticated-sql-injection-exploit/