CVE-2019-13447

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-07-17

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Xpare (Sertek)

References

• https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/