Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

PT-2018-4374

Name of the Vulnerable Software and Affected Versions ConnX ESP HR Management version 4.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ctl00$cphMainContent$txtUserName parameter in the /frmLogin.aspx API endpoint...