EUVD-2018-2358

Malware in sbrugna...

Sql injection

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

CVE-2018-10284

Affected software: Adaltech G-Ticket v70 EME104. Vulnerable component: mobile-loja/mensagem.asp, parameter eve_cod . Root cause: SQL Injection due to unvalidated input. Impact: enables execution of arbitrary SQL commands (as stated in sources), with high severity in CVSS metrics. Exploitation det...

CVE-2018-10284: Improper Neutralization of Special Elements used in an SQL Command

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

PT-2018-9800

Name of the Vulnerable Software and Affected Versions: Adaltech G-Ticket version v70 EME104 Description: The issue is related to SQL Injection, which can be exploited via the eve cod parameter in the "mobile-loja/mensagem.asp" endpoint. Recommendations: For Adaltech G-Ticket version v70 EME104,...