CVE-2020-3936 — Unisoon UltraLog Express - SQL Injection

CVE-2020-3936

Unisoon UltraLog Express - SQL Injection PUBLISHED

Description (CNA)

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.

Affected (CNA)

Vendor / product	Versions
Unisoon / UltraLog Express	affected 1.4.0

CWE

CWE-89

References

https://www.twcert.org.tw/tw/cp-132-3451-7d9f0-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-3451-7d9f0-1.html

CISA-ADP

No English description supplied.

No references supplied.