EUVD-2015-5332

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2015-5376

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2015-5376

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2015-5376

GSI WiNPAT Portal (GSI Office Management, Germany) is affected by CVE-2015-5376 through versions 3.2.0.1001–3.6.1.0. The vulnerability is a SQL injection in the login form, exploitable via the username field that allows a remote attacker to execute arbitrary SQL commands. The connected CNVD entry...

CVE-2015-5376: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

PT-2017-6845

Name of the Vulnerable Software and Affected Versions GSI WiNPAT Portal versions 3.2.0.1001 through 3.6.1.0 Description The issue allows remote attackers to execute arbitrary SQL commands via the username field in the login form. Recommendations For versions 3.2.0.1001 through 3.6.1.0, update to ...