CVE-2015-5376

GSI WiNPAT Portal (GSI Office Management, Germany) is affected by CVE-2015-5376 through versions 3.2.0.1001–3.6.1.0. The vulnerability is a SQL injection in the login form, exploitable via the username field that allows a remote attacker to execute arbitrary SQL commands. The connected CNVD entry...

CVE-2015-5376

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...