Lucene search
CVE-2024-25509
RuvarOA SQL injection via sys_file_storage_id paramete
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2024-25509 | 7 May 202400:00 | – | vulnrichment |
 | CVE-2024-25509 | 7 May 202400:00 | – | cvelist |
 | CVE-2024-25509 | 7 May 202419:15 | – | nvd |
 | RuvarOA sys_file_storage_id Parameter SQL Injection Vulnerability | 10 May 202400:00 | – | cnvd |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| sys_file_storage_id | query param | /WorkFlow/wf_file_download.aspx | SQL injection vulnerability via the sys_file_storage_id parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo07 May 2024 19:15Current
8.3High risk
Vulners AI Score8.3
CVSS39.4
EPSS0.00043
SSVC