high7.8Public exploit code
CVE-2019-12372
Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Petraware pTransformer ADC < 2.1.7.22827 - Login Bypass2019-05-28 · remote · windows
Impact
Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Petraware | Ptransformer Adc | before 2.1.7.22827 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153084/Petraware-pTransformer-ADC-SQL-Injection.html
- https://faudhzanrahman.blogspot.com/2019/05/sql-injection-on-login-form.html
- http://packetstormsecurity.com/files/153084/Petraware-pTransformer-ADC-SQL-Injection.html
- https://faudhzanrahman.blogspot.com/2019/05/sql-injection-on-login-form.html