CVE-2017-15379 - An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password

CRITICAL

An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password

Published Oct 23, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 2.73%

An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://whiteboyz.xyz/esic-software-publico-autentication-bypass.html		x_refsource_MISCThird Party AdvisoryURL Repurposed
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-6832		Advisory
https://www.exploit-db.com/exploits/42980/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry