2 matches found
Sql injection
Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...
7.5CVSS9.8AI score0.01371EPSS
SaveExploits0References1Affected Software1
Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation
This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Module Options msf use auxiliary/gather/solarwinds/orionsqli msf undefinedorionsqli show actions ...actions... msf undefinedorionsqli set ACTION msf undefinedorionsqli show options...
7.5CVSS5.6AI score0.47749EPSS
SaveExploits8
20