What’s Vulnerable › Vulnerabilities

CVE-2020-23282

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-07-21 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.

Affected products

• Mv Mconnect: 02.001.00, 2013.1.6.8

References

• https://github.com/ifmacedo/mconnect/blob/main/SQLinjection
• https://www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/
• https://github.com/ifmacedo/mconnect/blob/main/SQLinjection
• https://www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/

Get alerted when CVE-2020-23282 or the next vulnerability affects your stack