20170801 [CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL Injection Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/540946/100/0/threaded CVE-2017-11494
CRITICAL
SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection
Record summary
CVE-2017-11494 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSOL.Connect ISET-mpp meter 1.2.4.2 - SQL InjectionExploitDB exploitby Andy TanNot analyzed1 file
References
4100067vdb entry
http://www.securityfocus.com/bid/100067 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-11494 42408exploit
https://www.exploit-db.com/exploits/42408