mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 10:41:43 +00:00
18 lines
703 B
Markdown
18 lines
703 B
Markdown
|
### [CVE-2017-12930](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12930)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/unknownpwn-zz/unknownpwn.github.io
|
||
|
|
|