Octeth Oempro 4.7 allows SQL injection

December 12, 2019

Overview :

Octeth Oempro 4.7 found a SQL injection. The parameter “CampaignID” in “Campaign.Get” is vulnerable to SQL Injection attacks.

Affected Product(s) :

Vulnerability Details :

CVE ID :	CVE-2019-19740
	The parameter “CampaignID” in “Campaign.Get” is vulnerable to SQL Injection attacks.

Solution :

Upgrade to latest version of Octeth Oempro