High severity7.5NVD Advisory· Published Jul 21, 2021· Updated Jun 17, 2026

CVE-2020-23282

Description

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MV/mConnect applicationdescription
MV/mConnectllm-fuzzy
Range: =02.001.00

Patches

Vulnerability mechanics

References

github.com/ifmacedo/mconnect/blob/main/SQLinjectionnvdExploitThird Party Advisory
www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000