7 matches found
Amodat Mobile Application Gateway SQL Injection Vulnerability (CNVD-2022-68951)
Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from the username parameter in the login panel Lack of validation of externally entered SQL statements. An attacker could...
Amodat Mobile Application Gateway SQL Injection Vulnerability
Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...
CVE-2022-23169 Amodat - Mobile Application Gateway SQL Injection (SQLi)
attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...
CVE-2022-23167 Amodat - Mobile Application Gateway Local File Inclusion (LFI)
Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED...
Amodat Mobile Application Gateway 安全漏洞
Amodat Mobile Application Gateway is a mobile application gateway from Amodat Israel. A security vulnerability exists in Amodat versions prior to 7.12.00.09, which can be exploited by an attacker to read sensitive files on the system...
Amodat Mobile Application Gateway SQL注入漏洞
Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...
Amodat Mobile Application Gateway SQL注入漏洞
Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from the username parameter in the login panel Lack of validation of externally entered SQL statements. An attacker could...