PT-2020-13165

Name of the Vulnerable Software and Affected Versions DB Soft SGLAC versions prior to 20.05.001 Description An issue in the SGLAC web frontend allows an attacker to execute arbitrary SQL commands on the SQL Server. This can be achieved by using the xp cmdshell stored procedure through the...