~/products/rausoft/id.prove

pipeline liveDigest Docs

Rausoft Id.Prove vulnerabilities

1 known vulnerability affecting rausoft/id.prove.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2018-16659P3CRITICALCVSS 9.8PoCv2.952018-09-28

CVE-2018-16659 [CRITICAL] CWE-89 CVE-2018-16659: An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.

Rausoft Id.Prove vulnerabilities | cvebase