CVE-2015-5376

Critical

Published: 18/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

There is an SQL injection vulnerability in the login form of GSI WiNPAT Portal versions 3.2.0.1001 through 3.6.1.0 that allows remote attackers to execute arbitrary SQL commands via the username field.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade to the latest version of GSI WiNPAT Portal and implement appropriate security measures such as input validation.

Original NVD description (English source)

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field.