TI-2014-04439 CVE-2014-5440 · GHSA-v22x-533h-xvqjSQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before…Priority LOW 37SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02141 · Published 2014-09-12 · No fix listed CWE-89