CRITICAL🇵🇱 Wersja polska

CVE-2019-1010248

CVSS 9.8v3.0pub. 2019-07-18upd. 2024-11-21

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • I Doit

    APP
    I-Doit
    ≤ 1.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-37755CRITICAL9.8ten sam produkt

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator creden...

CVE-2023-37756CRITICAL9.8ten sam produkt

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator accou...

CVE-2019-25581HIGH8.8ten sam produkt

i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi...

CVE-2019-25582HIGH7.1ten sam produkt

i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to down...

CVE-2024-8749HIGH8.8ten sam produkt

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a spec...