CVE-2019-12720

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to SQL Injection in mvc_send_mail.aspx (MailAdd parameter). The issue also affects the picture_manage_mvc.aspx (plant_no), swapdl_mvc.aspx (plant_no), and account_management.aspx (Text_Postal_Code, Text_Dis_Code) parameters. Attacker...