Non notée
CVE-2017-12710 A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Description
A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Advantech WebAccess | Versions non publiées |
Références
- www.tenable.com www.tenable.com
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- 100526 www.securityfocus.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Advantech WebAccess
Les 22 CVE de Advantech WebAccess →
CVE-2021-38408
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper…
Non notée
CVE-2019-3942
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files
Non notée
CVE-2020-10607
In Advantech WebAccess, Versions 8.4.2 and prior
Non notée
CVE-2017-16732
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3
Non notée