Security Advisory

CVE-2017-20128

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-13 17:55:25

Last updated 2025-04-14 16:00:35

Assigner VulDB

CVSS score 7.3

State PUBLISHED

Description

A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗