Lucene search
PRIOn knowledge basePRION:CVE-2016-6566HistoryJul 13, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-07-1320:29:00
PRIOn knowledge base
www.prio-n.com
1
The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may then be executed by the backend server. eTRAKiT 3.2.1.17 was tested, but other versions may also be vulnerable.
Related
exploitpack
exploitpack
Sungard eTRAKiT3 3.2.1.17 - SQL Injection
2017-06-02 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2016-6566
2018-07-13 20:29:01
cve
cve
CVE-2016-6566
2018-07-13 20:29:01
cert
cert
Sungard eTRAKiT3 may be vulnerable to SQL injection
2016-12-06 00:00:00
exploitdb
exploitdb
Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
2017-06-02 00:00:00