CVE-2018-10284

Affected software: Adaltech G-Ticket v70 EME104. Vulnerable component: mobile-loja/mensagem.asp, parameter eve_cod . Root cause: SQL Injection due to unvalidated input. Impact: enables execution of arbitrary SQL commands (as stated in sources), with high severity in CVSS metrics. Exploitation det...