CVE-2011-1913 SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mercator sentinel | = 2.0 | No fix listed |
References
- cert.netpeas.org
- cert.netpeas.org
- 46014 third-party-advisory vendor-advisory
- VU#122142 third-party-advisory us-government-resource
- 49638 vdb-entry
- mercator-unspecified-sql-injection(69847) vdb-entry