NetSight
IP …
high7.5Public exploit code

CVE-2014-1597

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL co…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI.

Affected products

VendorProductAffected versions
I-DoitI-Doit
through 1.2.4
All versions
Versions 1.0, 1.0.2, 1.1.1, 1.1.2

Weakness classification

CWE-89

References