| Package | Affected versions | Patched versions |
|---|---|---|
| iview | < 5.7.05.7057 | 5.7.05.7057 |
A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free