PT-2016-6695
CVE-2016-5817
·
تاريخ النشر
2016-08-22
·
تاريخ التحديث
2016-08-22
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cargotec Navis WebAccess versions prior to 2016-08-10
Description
A SQL injection issue exists in the news pages of the software, allowing remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.
Recommendations
For versions prior to 2016-08-10, update to a version released after 2016-08-10 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾