Description
SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.
Unscored
CVE-2020-23282
EUVD-2020-16030GHSA-hmx5-gpvw-gpv4
SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password…
Published Jul 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre