CVE-2020-23282

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.

• CWE-89

• https://github.com/ifmacedo/mconnect/blob/main/SQLinjectionExploit, Third Party Advisory
• https://www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/Third Party Advisory
• https://github.com/ifmacedo/mconnect/blob/main/SQLinjectionExploit, Third Party Advisory
• https://www.linkedin.com/pulse/mconnect-mv-sql-injection-parcial-iran/Third Party Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23263Persistent Cross-site scripting vulnerability on Fork CMS ve…6.1
• CVE-2020-23264Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 a…8.8
• CVE-2020-23266An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String…5.5
• CVE-2020-23267An issue was discovered in gpac 0.8.0. The gf_hinter_track_p…7.1
• CVE-2020-23269An issue was discovered in gpac 0.8.0. The stbl_GetSampleSiz…5.5
• CVE-2020-23273Heap-buffer overflow in the randomize_iparp function in edit…5.5
• CVE-2020-23283Information disclosure in Logon Page in MV's mConnect applic…7.5
• CVE-2020-23284Information disclosure in aspx pages in MV's IDCE applicatio…7.5
• CVE-2020-23302There is a heap-use-after-free at ecma-helpers-string.c:772 …9.8
• CVE-2020-23303There is a heap-buffer-overflow at jmem-poolman.c:165 in jme…9.8
• CVE-2020-23306There is a stack-overflow at ecma-regexp-object.c:535 in ecm…9.8
• CVE-2020-23308There is an Assertion 'context_p->stack_top_uint8 == LEXER_E…7.5