VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published May 9, 2013· Updated Apr 29, 2026

CVE-2013-0684

CVE-2013-0684

Description

SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

3
  • Invensys/Wonderware Information Server3 versions
    cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1sp1:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1sp1:*:*:*:*:*:*
    • cpe:2.3:a:invensys:wonderware_information_server:4.5:-:portal:*:*:*:*:*
    • cpe:2.3:a:invensys:wonderware_information_server:5.0:-:portal:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.