CVE-2020-12507 — s::can moni::tools autheticated SQL injection

CVE-2020-12507

s::can moni::tools autheticated SQL injection PUBLISHED

Description (CNA)

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.

Affected (CNA)

Vendor / product	Versions
s::can / moni:tools	affected 1.0 before 4.2

CWE

CWE-89

References

https://www.s-can.at/en/the-new-monitool-v4-2-security-first/

ADP enrichment

CVE

No English description supplied.

https://www.s-can.at/en/the-new-monitool-v4-2-security-first/

CISA-ADP

No English description supplied.

No references supplied.