Advantech R-SeeNet SQL Injection (CVE-2020-25157)

A SQL injection vulnerability exists in Advantech R-SeeNet. The vulnerability is due to insufficient validation on the deviceid parameter within deviceposition.php...

CVE-2020-25157

The R-SeeNet webpage 1.5.1 through 2.4.10 suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information...

CVE-2020-25157

Summary of CVE-2020-25157 : The vulnerability affects Advantech’s R-SeeNet web application (versions 1.5.1 through 2.4.10). A flaw in device_position.php allows improper validation of the device_id parameter, enabling SQL injection that can disclose sensitive information from the R-SeeNet databas...

CVE-2020-25157

The R-SeeNet webpage 1.5.1 through 2.4.10 suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information...