Filtered by vendor Rausoft Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-16659 1 Rausoft 1 Id.prove 2024-08-05 9.8 Critical
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.