CVE-2018-10997

Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.

Date published : 2018-06-17

https://gist.github.com/dmblbc/14a77036a9562407194c3cf3ee3f265e