CVE-2020-12606

An issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in the SVCManejador.svc webservice of the SGLAC web frontend allows an attacker to run arbitrary SQL commands on the SQL Server. Command execution can be easily achieved by using the xp_cmdshell stored procedure.

• CWE-89

• https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-12606Third Party Advisory
• https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-12606Third Party Advisory

Published

Aug 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12594A privilege escalation flaw allows a malicious, authenticate…7.2
• CVE-2020-12595An information disclosure flaw allows a malicious, authentic…4.9
• CVE-2020-1260A remote code execution vulnerability exists in the way that…7.5
• CVE-2020-12603Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume …7.5
• CVE-2020-12604Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptib…7.5
• CVE-2020-12605Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume …7.5
• CVE-2020-12607An issue was discovered in fastecdsa before 2.1.2. When usin…7.5
• CVE-2020-12608An issue was discovered in SolarWinds MSP PME (Patch Managem…7.8
• CVE-2020-1261An information disclosure vulnerability exists in the way Wi…5.5
• CVE-2020-12612An issue was discovered in BeyondTrust Privilege Management …7.8
• CVE-2020-12613An issue was discovered in BeyondTrust Privilege Management …8.8
• CVE-2020-12614An issue was discovered in BeyondTrust Privilege Management …7.8