CVE-2017-12729

https://notcve.org/view.php?id=CVE-2017-12729

A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password. Se ha descubierto un problema de inyección SQL en Moxa SoftCMS Live Viewer hasta la versión 1.6. Se ha identificado una vulnerabilidad de neutralización indebida de elementos especiales usada en un comando SQL ("inyección SQL"). • https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •