CVE-2022-1375

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEslogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1375

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEslogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1374

Delta Electronics DIAEnergie is affected by a blind SQL injection in GetDemandAnalysisData and various handlers (e.g., DIAE_unHandler.ashx) across all versions prior to 1.8.02.004. The vulnerability allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and execute system ...

CVE-2022-1374

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEunHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1374

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEunHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1372

Delta Electronics DIAEnergie is affected by a blind SQL injection in dlSlog.aspx (CVE-2022-1372) for all versions before 1.8.02.004. The vulnerability allows an attacker to inject arbitrary SQL queries, retrieve/modify database contents, and could lead to remote code execution, as reported in mul...

CVE-2022-1372

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1371

CVE-2022-1371 affects Delta Electronics DIAEnergie (all versions before 1.9) with a blind SQL injection in ReadRegf. The NVD entry cites ReadRegf as the vulnerable component and a high-severity impact (C/H/I/A) with network exposure and low attack complexity. Public sources in the connected docum...

CVE-2022-1371

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1370

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1370

Delta Electronics DIAEnergie is affected by a blind SQL injection in the ReadREGbyID function across all versions prior to 1.9 (1.8.02.004 in public advisories). The vulnerability, confirmed in CVE-2022-1370, can allow an attacker to inject arbitrary SQL, retrieve/modify database contents, and po...

CVE-2022-1369

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1369

Delta Electronics DIAEnergie POS-ready industrial energy management software (all versions prior to 1.8.02.004) contains a blind SQL injection vulnerability in ReadRegIND. Exploitation could allow an attacker to inject arbitrary SQL, read/modify database contents, and execute system commands. CVS...

CVE-2022-1367

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1367

Delta Electronics DIAEnergie is affected by a blind SQL injection in Handler_TCV.ashx across all versions prior to 1.8.02.004, enabling an attacker to inject arbitrary SQL, read/modify database contents, and execute system commands. The issue is tracked under CVE-2022-1367. Remediation per the ad...

CVE-2022-1366

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1366

Delta Electronics DIAEnergie is affected by CVE-2022-1366. A blind SQL injection exists in HandlerChart.ashx across all versions before 1.8.02.004, allowing an attacker to inject arbitrary SQL, retrieve/modify data, and execute system commands. The issue stems from insufficient input validation i...

PT-2022-13836

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the DIAE unHandler.ashx file, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute...

CVE-2022-1378: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEpgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1377: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAErltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...