CVE-2025-52694-POC

CVE-2025-52694: SQL Injection in Advantech SaaS Composer Questo repository contiene strumenti Proof-of-Concept PoC per CVE-2025-52694 , una vulnerabilità critica di SQL Injection non autenticata che colpisce Advantech IoTSuite e prodotti IoT Edge. Panoramica della vulnerabilità...

📄 Advantech IoTSuite / IoT Edge SQL Injection

A critical unauthenticated SQL injection vulnerability was identified in Advantech WISE-IoTSuite / SaaS Composer. The issue resides in the /displays/filename.json endpoint, where the filename parameter is improperly sanitized before being concatenated into a backend PostgreSQL query. An attacker...