Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-6633 | Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: icscert
Published:
Updated: 2024-08-04T12:46:34.614Z
Reserved: 2020-06-19T00:00:00
Link: CVE-2020-14497
No data.
Status : Modified
Published: 2020-07-15T02:15:12.547
Modified: 2024-11-21T05:03:23.890
Link: CVE-2020-14497
No data.
OpenCVE Enrichment
No data.
EUVD