RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-05-08 15:15
Updated : 2024-07-03 01:49
NVD link : CVE-2024-25523
Mitre link : CVE-2024-25523
CVE.ORG link : CVE-2024-25523
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')