PT-2014-6172
CVE-2014-4858
·
تاريخ النشر
2014-07-26
·
تاريخ التحديث
2015-10-06
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Sabre AirCentre Crew products version 2010.2.12.20008 and earlier
Description
The issue concerns SQL injection vulnerabilities in the CWPLogin.aspx file of Sabre AirCentre Crew products. Remote attackers can execute arbitrary SQL commands by manipulating the
username or password fields.Recommendations
For versions 2010.2.12.20008 and earlier, update to a version that contains a fix for this issue to prevent SQL injection attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾