CVEs-PoC/2017/CVE-2017-12930.md

CVE-2017-12930

Description

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

POC

Reference

• http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html
• http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html

Github

• https://github.com/unknownpwn-zz/unknownpwn.github.io