• info
• discussion
• exploit
• solution
• references

Hummingbird CyberDOCS SQL Injection Vulnerability

Hummingbird CyberDOCS has been reported prone to an SQL Injection Vulnerability.

The issue has been reported to exist due to a lack of sufficient sanitization performed on user-supplied data that is parsed by the loginact.asp script.

Ultimately, an attacker may exploit this vulnerability to inject malicious SQL code into CyberDOCS SQL requests.