CVE-2018-1000631

Battelle V2I Hub 3.0 is affected by SQL injection (CVE-2018-1000631). A remote attacker could exploit specially crafted SQL statements in tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() to view, add, modify or delete data in the back-end database. Related CNVD/CVE records confirm ...