Security Advisory
CVE-2018-16659
9.8
CRITICAL
Vulnerability Description
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.
Published Date
September 28, 2018
Official Source
NIST NVD Advisory