A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information.
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36223