Security Advisory

CVE-2015-8298

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-24 19:00:00
Last updated 2024-08-06 08:13:32
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the (1) loginpassword, (2) loginusername, (3) zusatzlicher, or (4) groupid parameter to index.htm, or the (5) rxtec cookie to index.htm.