VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 12, 2014· Updated Jun 17, 2026

CVE-2014-0763

CVE-2014-0763

Description

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and access to records in the table of the software database or execution of arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Advantech/Webaccess6 versions
    cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*range: <=7.1
    • cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.