CVE:CVE-2014-4858
CNNVD:CNNVD-201407-631
Sabre Airline Solutions Sabre AirCentre Crew是美国Sabre Airline Solutions公司的一套应用于运输行业的船员管理解决方案。该方案支持员工KPI制作和培训、业务流程培训和船员名册变更跟踪等。
Sabre Airline Solutions Sabre AirCentre Crew产品2010.2.12.20008及之前版本的CWPLogin.aspx脚本存在SQL注入漏洞。远程攻击者可借助‘username’或‘password’字段利用该漏洞执行任意SQL命令。
solution:Upgrade sabreairlinesolutions crew_management to a higher version than 2010.2.12.20008,and avoid the version (,2010.2.12.20008]; Upgrade sabreairlinesolutions crew_operations to a higher version than 2010.2.12.20008,and avoid the version (,2010.2.12.20008]; Upgrade sabreairlinesolutions crew_planning to a higher version than 2010.2.12.20008,and avoid the version (,2010.2.12.20008]; Upgrade sabreairlinesolutions crew_services to a higher version than 2010.2.12.20008,and avoid the version (,2010.2.12.20008]; Upgrade sabreairlinesolutions crew_training to a higher version than 2010.2.12.20008,and avoid the version (,2010.2.12.20008]