description: Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'.
problem types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
affected:
{
product: Advantech iView
vendor: n/a
versions:
status: affected, version: iView versions prior to v5.7.03.6112
}