SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter.  NOTE: some of these details are obtained from third party information.
                
            References
                    | Link | Resource | 
|---|---|
| http://secunia.com/advisories/38698 | Vendor Advisory | 
| http://packetstormsecurity.org/1002-exploits/wsccms-sql.txt | Exploit | 
| http://www.exploit-db.com/exploits/11507 | Exploit | 
| http://www.securityfocus.com/bid/38335 | Exploit | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56406 | 
Configurations
                    Information
                Published : 2010-02-23 12:30
Updated : 2017-08-16 18:32
NVD link : CVE-2010-0698
Mitre link : CVE-2010-0698
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                dynamicsoft
- wsc_cms
 


