CVE-2021-21923

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘companyfilter’ parameter with the administrative account or through cross-site request forgery...

CVE-2021-21923

Advantech R-SeeNet contains multiple SQL injection vulnerabilities in the user_list page (filters: username_filter, name_filter, surname_filter, company_filter) due to improper neutralization of inputs and dynamic SQL/concatenated queries. Exploitation can be triggered by authenticated requests o...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...