exploitDog

CVE-2017-12729

Опубликовано: 18 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05
Mitigation
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:moxa:softcms_lab_view:*:*:*:*:*:*:*:*

Версия до 1.6 (включая)

EPSS

Процентиль: 42%

0.00204

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-3qhw-5546-2w2p

CVSS3: 9.8

github

больше 3 лет назад

A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password.

EPSS

Процентиль: 42%

0.00204

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

CWE-89