CRITICAL🇵🇱 Wersja polska

CVE-2019-1010248

CVSS 9.8v3.0pub. 2019-07-18upd. 2024-11-21

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • I Doit

    APP
    I-Doit
    ≤ 1.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-37755CRITICAL9.8PL ✓same product

i-doit: zakodowane na stałe dane logowania administratora (Auth Bypass)

CVE-2023-37756CRITICAL9.8PL ✓same product

Słabe wymagania hasła w I-doit pro/open 25 umożliwiają atak brute-force

CVE-2019-25581HIGH8.8same product

i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi...

CVE-2019-25582HIGH7.1same product

i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to down...

CVE-2024-8749HIGH8.8same product

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a spec...