| Package | Affected versions | Patched versions |
|---|---|---|
| id.prove | = 2.95 |
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free