| Package | Affected versions | Patched versions |
|---|---|---|
| mconnect | = 02.001.00= 2013.1.6.8 |
SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free