An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection.Referenceshttps://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/