Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1.
Max CVSS
9.8
EPSS Score
0.14%
Published
2019-07-18
Updated
2019-07-23
SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI.
Max CVSS
7.5
EPSS Score
0.22%
Published
2014-02-27
Updated
2017-08-29
2 vulnerabilities found