EUVD-2018-3048

Malware in sbrugna...

Etere EtereWeb SQL Injection Vulnerability

Etere EtereWeb is an enterprise media asset management system from Etere Italy. A SQL injection vulnerability exists in the POST parameters 'txUserName' and 'txPassword' in Etere EtereWeb versions prior to 28.1.20. A remote attacker can exploit this vulnerability to disclose sensitive database...

PT-2018-10234

Name of the Vulnerable Software and Affected Versions Etere EtereWeb versions prior to 28.1.20 Description The issue is related to a pre-authentication blind SQL injection. This occurs in the POST parameters txUserName and txPassword. Recommendations For versions prior to 28.1.20, update to versi...

CVE-2018-10997: Improper Neutralization of Special Elements used in an SQL Command

Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword...