Skip to content

CVE-2016-5048 SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field.

CriticalCVSS 9.8 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field.

Affected products

ProductAffected versionsFixed in
readydesk = 9.1 No fix listed

References

  • VU#294272 third-party-advisory us-government-resource
  • 92487 third-party-advisory vdb-entry