CVE-2019-12372

CVE-2019-12372 affects PETRAWARE Technologies’ pTransformer ADC prior to version 2.1.7.22827. The root cause is SQL injection via the User ID parameter on the login form, enabling an attacker to execute arbitrary SQL commands. Documented PoCs/exploits show bypass of login through crafted input. I...