Skip to content
OpenAdvisories
Unscored CVE-2013-3578 EUVD-2013-3512GHSA-vw23-4pvr-fm3x

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated us…

Published Jul 15, 2013 · Updated Sep 17, 2024 · Assigned by certcc

Description

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.

References