CVE-2012-0234
Advantech WebAccess < 7.0 - SQL Injection via Malformed URL
Title source: llmDescription
SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.
References (2)
Core 2
Core References
Patch, US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/52051
Scores
EPSS
0.0016
EPSS Percentile
36.8%
Details
CWE
CWE-89
Status
published
Products (2)
advantech/advantech_webaccess
5.0
advantech/advantech_webaccess
< 6.0
Published
Feb 21, 2012
Tracked Since
Feb 18, 2026