PT-2024-22892

Name of the Vulnerable Software and Affected Versions Alldata version 0.4.6 Description A SQL injection issue was discovered via the tablename parameter at the "/data/masterdata/datas" API endpoint. This allows for potential exploitation. Recommendations For Alldata version 0.4.6, as a temporary...

CVE-2024-29432: Improper Neutralization of Special Elements used in an SQL Command

Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas...

ALLDATA SQL Injection Vulnerability

ALLDATA is an online resource for automotive original equipment manufacturer information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A SQL injection vulnerability exists in ALLDATA version V0.4.6, which stems from the tablename parameter in...