CVE-2018-6329

CVE-2018-6329 affects Unitrends Backup (UB) prior to 10.1.0. The issue is a SQL injection in the libbpext.so authentication path, allowing a remote attacker to bypass authentication and place a privilege escalation exploit on the target, enabling arbitrary command execution. Public disclosures an...

CVE-2020-8427

CVE-2020-8427 affects Unitrends Backup prior to 10.4.1, where an HTTP request parameter was not properly sanitized, allowing SQL injection that results in authentication bypass. Exploitation guidance and in-wild details are not provided in the connected documents; however, the NVD entry reports h...