ChkAdminViewUsrPwd1 Component Code Execution

The vulnerability of the ChkAdminViewUsrPwd1 component mailPg.asp in the Advantech WebAccess remote monitoring software is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the ProjectName and...

Advantech WebAccess mailPg ChkAdminViewUsrPwd1 SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within ChkAdminViewUsrPwd1, called from mailPg.asp. The issue results from the lack of...

PT-2017-3592

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions prior to 8.3 Description: A SQL Injection issue was discovered in Advantech WebAccess. The software does not properly sanitize its inputs for SQL commands, which can be exploited by a remote attacker. The...