2 matches found
CVE-2024-25527: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...
9.4CVSS5.9AI score0.00512EPSS
SaveExploits1References1
CVE-2024-25528: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...
5.9CVSS5.9AI score0.00279EPSS
SaveExploits1References1
20