Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc)

<p>Posted by disclosure via Fulldisclosure on Aug 17</p>0day Rubbish Research Team is publicly disclosing a vulnerability in XPressEntry 3.7.7454 (Telaeris Inc). The research <br /> is published and a proof-of-concept is available.<br /> <br /> Pre-authentication RCE (SQL injection) (CVSS 9.8, pre-authentication)<br /> <br /> Telaeris XPressEntry 3.7.7454 runs its main HTTP API without authenticat