CriticalCVSS 9.8
EPSS 1.8%
Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.