CVE-2016-5817

Critical

Published: 22/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-5817 is an SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

This vulnerability may lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update Cargotec Navis WebAccess to a version after 2016-08-10 to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.