Unrated severityNVD Advisory· Published Feb 19, 2020· Updated Aug 6, 2024

CVE-2014-9613

Description

Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to webadmin/auth/verification.php or (2) dpid parameter to webadmin/deny/index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netsweeper/Netsweeperdescription
Netsweeper/Netsweeperllm-fuzzy
Range: <2.6.29.10

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000