11 matches found
CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
EUVD-2019-7474
Malware in sbrugna...
CloudBoot SQL Injection Vulnerability
iDCOS CloudBoot is an open source X86 server configuration and installation tool from China's CloudBoot Technology iDCOS. CloudBoot suffers from a SQL injection vulnerability. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...
CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
Sql injection
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
CVE-2019-16999
CloudBoot vulnerable to SQL Injection through a crafted Status field in JSON data sent to api/osinstall/v1/device/getNumByStatus (CVE-2019-16999). Multiple sources (NVD, Red Hat, CNVD, CNVD/CVELIST entries) describe the issue as a lack of validation of externally entered SQL statements in CloudBo...
CVE-2019-16999: Improper Neutralization of Special Elements used in an SQL Command
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...
PT-2019-14918
Name of the Vulnerable Software and Affected Versions CloudBoot versions prior to 2019-03-08 Description The issue allows for SQL Injection via a crafted Status field in JSON data to the "api/osinstall/v1/device/getNumByStatus" URI. Recommendations For CloudBoot versions prior to 2019-03-08,...
Cloudboot Cloudboot Installation Platform suffers from SQL Injection Vulnerability
CloudBoot is the most widely used and easy-to-use fully automated installation platform in China, which can realize fully automated installation from hardware to operating system after the machine is racked, and automated rapid installation and configuration of large-scale servers. Cloudboot...