cve/2019/CVE-2019-12372.md

CVE-2019-12372

Description

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.

POC

Reference

• http://packetstormsecurity.com/files/153084/Petraware-pTransformer-ADC-SQL-Injection.html
• http://packetstormsecurity.com/files/153084/Petraware-pTransformer-ADC-SQL-Injection.html
• https://faudhzanrahman.blogspot.com/2019/05/sql-injection-on-login-form.html
• https://faudhzanrahman.blogspot.com/2019/05/sql-injection-on-login-form.html

Github

• https://github.com/ARPSyndicate/cvemon