Description
A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.
Unscored
CVE-2019-18663
EUVD-2019-8380GHSA-w8pw-7686-m9pr
A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbi…
Published Nov 4, 2019 · Updated Aug 5, 2024 · Assigned by mitre