← All advisories

Critical severity9.8NVD Advisory· Published Jun 17, 2018· Updated Jun 17, 2026

CVE-2018-10997

CVE-2018-10997

Description

Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Etere/EtereWeb2 versions
cpe:2.3:a:etere:etereweb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:etere:etereweb:*:*:*:*:*:*:*:*range: <28.1.20
- (no CPE)range: <28.1.20

Patches

Vulnerability mechanics

References

1

gist.github.com/dmblbc/14a77036a9562407194c3cf3ee3f265envdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.