CVE-2017-12930

EPSS 3.1%

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/144257/DlxSpot-SQL-Injection.htmlunverified exploitdbwww.exploit-db.com/exploits/42753unverified exploitdbwww.exploit-db.com/exploits/42754unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html