critical9.8Public exploit code
CVE-2017-12930
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as adminis…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tecnovision DLX Spot - Authentication Bypass2017-05-19 · webapps · php
- Tecnovision DLX Spot - SSH Backdoor Access2017-05-19 · remote · multiple
Impact
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecnovision | Dlx Spot Player4 | All versions |