Lucene search
RootSSV:62170HistoryApr 15, 2014 - 12:00 a.m.
Advantech WebAccess DBVisitor.dll特制SOAP请求SQL注入漏洞
2014-04-1500:00:00
Root
www.seebug.org
18
EPSS
0.012
Percentile
85.7%
CVE ID:CVE-2014-0763
Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。
Advantech WebAccess存在一个SQL注入攻击，漏洞是由于SOAP接口公开DBVisitor.dll，允许攻击者利用漏洞提交特制的SOAP请求，注入或操作SQL查询，可获取敏感敏感信息或操作数据库。
0
Advantech WebAccess 7.1
Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用：
http://webaccess.advantech.com/
Related
zdi
zdi
metasploit
metasploit
Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection
2014-05-13 19:17:59
checkpoint_advisories
checkpoint_advisories
Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
2014-06-10 00:00:00
nvd
nvd
CVE-2014-0763
2014-04-12 04:37:31
cve
cve
CVE-2014-0763
2014-04-12 04:37:31
packetstorm
packetstorm
Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection
2024-08-31 00:00:00
prion
prion
Sql injection
2014-04-12 04:37:00
cvelist
cvelist
CVE-2014-0763
2014-04-12 01:00:00
openvas
openvas
Advantech WebAccess Multiple Vulnerabilities
2014-04-16 00:00:00
nessus
nessus
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2015-08-17 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2017-02-14 00:00:00
ics
ics
Advantech WebAccess Vulnerabilities
2018-09-06 12:00:00