CVE-2020-26525: Improper Neutralization of Special Elements used in an SQL Command

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the database and server to initiate remote connections to third party DNS servers...

PT-2020-16439

Name of the Vulnerable Software and Affected Versions Damstra Smart Asset version 2020.7 Description The issue allows for SQL injection via the "API/api/Asset" endpoint, specifically through the originator parameter. This enables an attacker to force the database and server to initiate remote...