CVE-2017-12930

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

Date published : 2017-09-21

http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html