8x8 · Report #922567
SQL injection (stacked queries) in the export to Excel functionality on Vidyo Server
Validstatus
highseverity
3upvotes
29 Jul 2020disclosed
Summary
An abandoned Vidyo server was found to be vulnerable to SQL injection and exposing access to the associated local database. The Vidyo server was retired.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.