High severity7.5NVD Advisory· Published Jul 21, 2021· Updated Jun 17, 2026

CVE-2020-23282

Description

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MV/mConnect3 versions
cpe:2.3:a:mv:mconnect:02.001.00:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mv:mconnect:02.001.00:*:*:*:*:*:*:*
- cpe:2.3:a:mv:mconnect:2013.1.6.8:*:*:*:*:*:*:*
- (no CPE)range: =02.001.00
MV/mConnect applicationdescription

Patches

Vulnerability mechanics

References

github.com/ifmacedo/mconnect/blob/main/SQLinjectionnvdExploitThird Party Advisory
www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000