UBUNTU-CVE-2021-3286

SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545...

Spotweb SQL Injection Vulnerability

Spotweb is a Php-based Soptnet client from the Spotweb team that follows the Spotnet protocol. Spotweb 1.4.9 suffers from a SQL injection vulnerability that stems from an inadequate notAllowedCommands protection mechanism...

CVE-2021-3286

SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545...

CVE-2021-3286

The CVE-2021-3286 entry concerns Spotweb 1.4.9, where SQL injection exists because the notAllowedCommands protection is inadequate, allowing variations of the payload. The issue is linked to an incomplete fix for CVE-2020-35545 and is described across multiple sources (e.g., CNVD/OSV) as a time-b...

PT-2021-19971

Name of the Vulnerable Software and Affected Versions Spotweb version 1.4.9 Description The issue is related to SQL injection due to an inadequate protection mechanism. Specifically, the notAllowedCommands mechanism is incomplete, allowing variations of malicious payloads to be used. This problem...

CVE-2021-3286: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545...