Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-45876 EUVD-2024-41697GHSA-v3h8-6499-8h5p

The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL inject…

Published Nov 13, 2024 · Updated Nov 21, 2024 · Assigned by mitre

Description

The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries.

References