CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-06-19

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Esp Hr Management (Connx)

References

• https://labs.asteriskinfosec.com.au/cve/ConnX_ESP_HR.pdf