Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-3604 EUVD-2021-26908GHSA-rqc9-fff3-q983

Primion-Digitek Secure 8 SQL injection vulnerability

Published Jun 18, 2021 · Updated Sep 16, 2024 · Assigned by INCIBE

Description

Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.

Affected products

VendorProductAffectedFixed
Primion Digitek Secure 8 (Evalos) 1.0.1.55 —

References