critical9.8
CVE-2018-10997
Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.
Impact
Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Etere | Etereweb | before 28.1.20 |