vendor:
OpenEMM
by:
drone
7,5
CVSS
HIGH
SQL Injection / Stored XSS
89, 79
CWE
Product Name: OpenEMM
Affected Version From: 2013 (8.10.380.hf13.0.066)
Affected Version To: 2013 (8.10.380.hf13.0.066)
Patch Exists: YES
Related CWE: N/A
CPE: a:openemm:openemm:2013
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 12.04
2013
OpenEMM 2013 SQL Injection / Stored XSS
Exploits a host of vulnerabilities discovered in OpenEMM. Required ws.wsdl file should be in local directory.
Mitigation:
Ensure that user-supplied input is properly sanitized and validated before being used in SQL queries.
