Description (CNA)
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ord’ parameter. However, the high privilege super-administrator account needs to be used to achieve exploitation without cross-site request forgery attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Advantech | affected Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021) |
CWE
CWE-89
References
ADP enrichment
No English description supplied.