CVE-2024-28171 Delta Electronics DIAEnergie Path traversal

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten...

CVE-2024-23494 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23494 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23975 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEslogListParameters...

CVE-2024-23975 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEslogListParameters...

CVE-2024-28040 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEastListParameters...

CVE-2024-28040 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEastListParameters...

CVE-2024-25937 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script DIAEtagHandler.ashx...

CVE-2024-25937 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script DIAEtagHandler.ashx...

CVE-2024-28891 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script HandlerCFG.ashx...

CVE-2024-28891 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script HandlerCFG.ashx...

CVE-2024-28029 Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality...

CVE-2024-28029 Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality...

Delta Electronics DIAEnergie 跨站脚本漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. Delta Electronics DIAEnergie suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication credentials...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

Delta Electronics DIAEnergie 安全漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

Delta Electronics DIAEnergie 路径遍历漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

PT-2024-22234

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie affected versions not specified Description The issue is related to improper neutralization of input within the affected product, which could lead to cross-site scripting. Recommendations At the moment, there is no...