CVE-2021-28157: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete...

PT-2021-17781

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2021.1 Devolutions Server LTS versions prior to 2020.3.18 Description: The issue allows an administrative user to execute arbitrary SQL commands via a username in the "api/security/userinfo/delete" endpoin...