medium6.5
CVE-2025-68914
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.
Impact
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Riello-Ups | Netman 208 | before 1.12 |