PT-2016-6695

CVE-2016-5817

·

Published

2016-08-22

·

Updated

2016-08-22

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cargotec Navis WebAccess versions prior to 2016-08-10
Description A SQL injection issue exists in the news pages of the software, allowing remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.
Recommendations For versions prior to 2016-08-10, update to a version released after 2016-08-10 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2016-5817
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com