CVE-2014-4858

CVE-2014-4858; Sabre AirCentre Crew solutions (version 2010.2.12.20008 and earlier) contain SQL injection vulnerabilities in CWPLogin.aspx, exploitable via the username or password fields. Underlying issue: CWE-89 Improper Neutralization of SQL commands. Impact: remote attacker may bypass authent...