CVE-2025-11911: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This impacts the function Query of the file /DeviceFault.do?Action=Query. The manipulation of the argument sortField results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

PT-2025-42645

Name of the Vulnerable Software and Affected Versions Streamax Crocus version 1.3.40 Description A flaw exists in the Query function of the /DeviceFault.do?Action=Query file that allows for SQL injection through manipulation of the sortField argument. This issue is remotely exploitable. The explo...