Description
Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'usr_name' parameter in login requests. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'usr_name' parameter to potentially extract or modify database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Insite Software | Infor Storefront B2B | 1.0 | — |
References
- ExploitDB-48674 exploit
- Archived Infor Storefront Homepage product
- VulnCheck Advisory: Infor Storefront B2B 1.0 - 'usr_name' SQL Injection third-party-advisory