CVE-2014-9613: SQL Injection
Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to webadmin/auth/verification.php or (2) dpid parameter to webadmin/deny/index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9613?
CVE-2014-9613 is classified as a high severity vulnerability due to its potential for remote code execution through SQL injection.
How can I fix CVE-2014-9613?
To fix CVE-2014-9613, upgrade Netsweeper to version 2.6.29.10 or later to mitigate the SQL injection vulnerabilities.
What are the affected components of CVE-2014-9613?
CVE-2014-9613 affects the webadmin/auth/verification.php and webadmin/deny/index.php components of Netsweeper versions prior to 2.6.29.10.
Who can exploit CVE-2014-9613?
CVE-2014-9613 allows remote attackers to exploit the vulnerability without authentication, making it accessible to any user who can reach the affected endpoints.
What type of vulnerabilities are present in CVE-2014-9613?
CVE-2014-9613 contains multiple SQL injection vulnerabilities that can be exploited to execute arbitrary SQL commands.