CVE-2016-5048

Critical

Published: 26/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ReadyDesk 9.1 has an SQL injection vulnerability in chat/staff/default.aspx that allows remote attackers to execute arbitrary SQL commands via the user name field.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of ReadyDesk and implement input validation to prevent SQL injection attacks.

Original NVD description (English source)

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field.