https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:41:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00157 bdu:2023-00157 https://cve.radiocsirt.org/vuln/bdu:2023-00157 https://cve.radiocsirt.org/vuln/cnvd-2022-88792 cnvd-2022-88792 https://cve.radiocsirt.org/vuln/cnvd-2022-88792 https://cve.radiocsirt.org/vuln/euvd-2026-240658 EUVD-2026-240658 https://cve.radiocsirt.org/vuln/euvd-2026-240658 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3323 <p>An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.</p> <p>An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3323 https://cve.radiocsirt.org/vuln/ghsa-4cm4-j9qp-hc8j <p>An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.</p> <p>An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.</p> https://cve.radiocsirt.org/vuln/ghsa-4cm4-j9qp-hc8j https://cve.radiocsirt.org/vuln/gsd-2022-3323 gsd-2022-3323 https://cve.radiocsirt.org/vuln/gsd-2022-3323 https://cve.radiocsirt.org/vuln/icsa-22-342-01 <p>Advantech iView versions 5.7.04.6469 and prior are vulnerable to a SQL injection that could disclose sensitive product information to an unauthorized user.CVE-2022-3323 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).</p> <p>Advantech iView versions 5.7.04.6469 and prior are vulnerable to a SQL injection that could disclose sensitive product information to an unauthorized user.CVE-2022-3323 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).</p> https://cve.radiocsirt.org/vuln/icsa-22-342-01