CVE-2017-12930

Critical

Published: 21/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

Risk Assessment

This vulnerability poses a serious risk to organizations by allowing unauthorized users to gain control over the administrative system.

Recommendation

It is recommended to update the software to the latest version and implement additional security measures to minimize the risk of attacks.

Original NVD description (English source)

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.