CVE-2014-9612 SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via th...
CriticalCVSS 9.8
EPSS 4.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via the server parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsweeper | < 3.1.10 | 3.1.10 |
| netsweeper | >= 4.0.0, < 4.0.9 | 4.0.9 |
| netsweeper | >= 4.1.0, < 4.1.2 | 4.1.2 |
References
- packetstormsecurity.com third-party-advisory vdb-entry