high7.5Public exploit code
CVE-2014-8728
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Subex Fms 7.4 - SQL Injection2014-11-11 · webapps · multiple
Impact
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_user[name] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Subex | Roc Fraud Management System | through 7.4 |