RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-05-08 15:15
Updated : 2024-07-03 01:49
NVD link : CVE-2024-25526
Mitre link : CVE-2024-25526
CVE.ORG link : CVE-2024-25526
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')