CVE-2015-8298

RXTEC RXAdmin Update 06/2012 login page contains multiple SQL injection vulnerabilities exploitable via (1) loginpassword, (2) loginusername, (3) zusatzlicher, (4) groupid parameters to index.htm, or the (5) rxtec cookie to index.htm. The issue allows remote attackers to execute arbitrary SQL com...