Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-12507

s::can moni::tools autheticated SQL injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

s::can moni:tools

Default version status: unaffected

  • 1.0 to < 4.2affected

References