Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-3604

Primion-Digitek Secure 8 SQL injection vulnerability

Description

Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Primion Digitek Secure 8 (Evalos)

  • 1.0.1.55affected

References