Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-68914 EUVD-2025-205301GHSA-c2rc-wwm8-hc57

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGI…

Published Dec 24, 2025 · Updated Dec 24, 2025 · Assigned by mitre

Vendor: Riello Product: NetMan

Description

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.

Affected products

VendorProductAffectedFixed
Riello NetMan 208 – < 208 1.12 208 1.12

References