CVE-2017-12731

Critical

Published: 09/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles. The application is vulnerable to injection of malicious SQL queries via the input from the client.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, potentially resulting in data theft or modification.

Recommendation

It is recommended to update the software to a version newer than V195 and implement appropriate security mechanisms against SQL injection.

Original NVD description (English source)

A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of malicious SQL queries via the input from the client.