CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

CVE-2016-5048: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

PT-2016-6227

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the user name field in the chat/staff/default.aspx page. Recommendations For ReadyDesk version 9.1, consider restricting acce...