SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.
| Software | From | Fixed in |
|---|---|---|
| comersus_open_technologies / comersus_backoffice_lite | 6.0 | 6.0.x |
| comersus_open_technologies / comersus_backoffice_lite | 6.1 | 6.1.x |