2 matches found
CVE-2024-25509: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sysfilestorageid parameter at /WorkFlow/wffiledownload.aspx...
9.4CVSS5.9AI score0.00617EPSS
SaveExploits1References1
20