Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:30 p.m.•16 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS8AI score0.01219EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•15 views

ZXELINK ZXV10 W908 SQL Injection Vulnerability

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

9.8CVSS8.2AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/01 4:15 p.m.•16 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS5.9AI score0.01219EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/01 4:15 p.m.•36 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS9.7AI score0.01219EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/01 4:15 p.m.•28 views

Sql injection

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

7.5CVSS9.6AI score0.01219EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/12/01 4:15 p.m.•7 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS8.8AI score0.01219EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/12/01 3:44 p.m.•42 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8AI score0.01219EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/01 3:44 p.m.•79 views

CVE-2020-6880

The CVE-2020-6880 issue affects ZXELINK ZXV10 W908 wireless controller devices, where an SQL injection flaw stems from improper parameter filtering. A remote attacker can send crafted SQL statements without authentication and escalate to administrative rights. Affected versions are prior to ZXELI...

9.8CVSS9.6AI score0.01219EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2020/12/01 12:00 a.m.•20 views

Zxelink Wireless Controller SQL注入漏洞

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

9.8CVSS7.4AI score0.01219EPSS
SaveExploits0References2
Rows per page
Query Builder