PT-2020-7783

Name of the Vulnerable Software and Affected Versions: Netsweeper versions prior to 2.6.29.10 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the login parameter to the "webadmin/auth/verification.php" API endpoint or the dpid parameter t...

CVE-2014-9613: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to webadmin/auth/verification.php or 2 dpid parameter to webadmin/deny/index.php...