CVE-2016-5792 Moxa SoftCMS SQL Injection Vulnerability

Moxa SoftCMS is a central management software that manages large scale surveillance systems.

Moxa SoftCMS does not properly sanitize input fields, allowing an attacker to access the product by specially crafting the input.

Affected Versions:
SoftCMS versions prior to version 1.5

Successful exploitation allows an unauthenticated, remote attacker to manipulate SQL queries by injecting arbitrary SQL code or further exploit latent vulnerabilities in the underlying database.

Customers are advised to install Moxa SoftCMS 1.5 or later versions to remediate these vulnerabilities.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

Moxa SoftCMS prior to 1.5: /windows/i