Description (CNA)
ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ITPison / OMICARD EDM 's SMS | affected v6.0.1.5 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.