Security Advisory
CVE-2019-18663
9.8
CRITICAL
Vulnerability Description
A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.
Published Date
November 4, 2019
Official Source
NIST NVD Advisory