CVE-2020-3936

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.

Date published : 2020-03-26

https://www.twcert.org.tw/tw/cp-132-3451-7d9f0-1.html