CVE-2018-10997

The CVE-2018-10997 affects Etere EtereWeb prior to 28.1.20. A pre-authentication blind SQL injection exists in the POST parameters txUserName and txPassword, allowing an attacker to disclose database content and potentially other sensitive information without authentication. Public references con...