Security Advisory

CVE-2018-10997

9.8
CRITICAL

Vulnerability Description

Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.
Published Date June 17, 2018
Official Source NIST NVD Advisory