critical10.0
CVE-2020-3936
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL comm…
Impact
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unisoon | Ultralog Express Firmware | Version 1.4.0 |