PT-2021-18651

Name of the Vulnerable Software and Affected Versions ZEROF Expert pro version 2.0 Description The issue allows SQL Injection via the Authorization header to the "/v2/devices/add" endpoint. Recommendations For version 2.0, update the application to prevent SQL injection attacks, specifically by...

CVE-2021-30176: Improper Neutralization of Special Elements used in an SQL Command

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...