Unrated severityNVD Advisory· Published Aug 17, 2020· Updated Aug 4, 2024
CVE-2020-12606
CVE-2020-12606
Description
An issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in the SVCManejador.svc webservice of the SGLAC web frontend allows an attacker to run arbitrary SQL commands on the SQL Server. Command execution can be easily achieved by using the xp_cmdshell stored procedure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- DB Soft/SGLACdescription
Patches
Vulnerability mechanics
References
1- github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-12606mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.