CVE-2017-12930

This is a technical writeup detailing an SQL injection vulnerability in DlxSpot Player4's admin interface login. It provides the exploit payload and a timeline of disclosure efforts.

This writeup discloses hardcoded SSH credentials (dlxuser:tecn0visi0n) for DlxSpot Player4 LED video wall software, allowing authentication bypass and privilege escalation to root. No exploit code is provided, only credentials and a timeline of disclosure.