Description
SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DIAL | CentrosNet | prior to 2.65 | — |