CVE-2020-8887

2020-09-22T12:15:00
ID CVE-2020-8887
Type cve
Reporter cve@mitre.org
Modified 2020-09-30T16:21:00

Description

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php (aka the server login page).