SQL Injection Vulnerability in VideoInsight Web Client Version 6.3.5.11 and Earlier: Remote Code Execution

CVE-2017-5151 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.