EUVD-2018-10019

Malware in sbrugna...

EUVD-2018-10020

Malware in sbrugna...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...

Sql injection

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...

CVE-2018-18286

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...

Sql injection

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...

CVE-2018-18286

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...

CVE-2018-18285

CVE-2018-18285 affects CMG Suite up to version 8.4 SP2. The vulnerability is a SQL injection in the login interface caused by insufficient input validation, allowing an unauthenticated attacker to extract sensitive data from the database and, in some cases, execute arbitrary scripts. The NVD metr...

CVE-2018-18286

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...

CVE-2018-18286

CVE-2018-18286 affects CMG Suite 8.4 SP2 and earlier. The vulnerability arises from insufficient input validation in the changepwd interface, enabling an unauthenticated attacker to perform SQL injection. Consequences described include extraction of sensitive database data and execution of arbitr...

PT-2019-9572

Name of the Vulnerable Software and Affected Versions CMG Suite versions 8.4 SP2 and earlier Description The issue is related to SQL injection vulnerabilities due to insufficient input validation for the login interface. This could allow an unauthenticated attacker to conduct an SQL injection...

PT-2019-9573

Name of the Vulnerable Software and Affected Versions CMG Suite versions 8.4 SP2 and earlier Description The issue is related to SQL injection vulnerabilities due to insufficient input validation for the changepwd interface. This could allow an unauthenticated attacker to conduct an SQL injection...

CVE-2018-18286: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the...

CVE-2018-18285: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...