Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2020-07-15T01:50:54
Updated: 2024-08-04T12:46:34.614Z
Reserved: 2020-06-19T00:00:00
Link: CVE-2020-14497
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-15T02:15:12.547
Modified: 2024-11-21T05:03:23.890
Link: CVE-2020-14497
Redhat
No data.