6.5
CVSSv2

CVE-2012-1234

Published: 21/02/2012 Updated: 23/02/2012
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234.

Vulnerable Product Search on Vulmon Subscribe to Product

advantech advantech webaccess

advantech advantech webaccess 5.0