PT-2018-5455
CVE-2017-12729
·
تاريخ النشر
2018-01-18
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Moxa SoftCMS Live Viewer versions 1.6 and earlier
Description:
A SQL Injection issue has been discovered, allowing attackers to exploit an improper neutralization of special elements used in an SQL command. This enables access to SoftCMS without knowing the user's password.
Recommendations:
For Moxa SoftCMS Live Viewer versions 1.6 and earlier, consider restricting access to the SQL database to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using user input in SQL commands to prevent injection attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾