CVE-2022-26349

Delta Electronics DIAEnergie is affected by CVE-2022-26349 due to a blind SQL injection vulnerability in the DIAE_eccoefficientHandler.ashx. All versions prior to 1.8.02.004 are impacted, allowing an attacker to inject arbitrary SQL queries, potentially retrieve/modify database contents and execu...

CVE-2022-26065 Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26013

Delta Electronics DIAEnergie is affected by a blind SQL injection in the Get/Process path DIAE_dmdsetHandler.ashx, impacting DIAEnergie versions prior to 1.9 (initially noted as pre-1.8.02.004 in CVE-2022-26013). The vulnerability allows an attacker to inject arbitrary SQL, potentially reading/mo...

CVE-2022-26013 Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in DIAEdmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26013 Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in DIAEdmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25880 Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTagKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25880

Summary: CVE-2022-25880 is a blind SQL injection vulnerability in Delta Electronics DIAEnergie prior to 1.8.02.004, specifically in GetDemandAnalysisData-related paths (notably HandlerTag_KID.ashx). The issue allows injecting arbitrary SQL, potentially exposing or modifying database contents and ...

CVE-2022-25880 Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTagKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26069 Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerPageKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-0923 Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerDialogKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-0923 Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerDialogKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26069 Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerPageKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-0923

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability (CVE-2022-0923) in HandlerDialog_KID.ashx, impacting all versions prior to 1.9. The issue allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and potentially execute system commands. ICS adv...

CVE-2022-26069

Delta Electronics DIAEnergie is affected by a blind SQL injection in Get or HandlerPage_KID.ashx (CVE-2022-26069). The vulnerability affects all versions prior to 1.9; upgrade to 1.9 or later to fix. Impact includes potential disclosure, modification of database contents, and command execution, w...

CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system...

CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system...

CVE-2022-25347

Delta Electronics DIAEnergie is affected by CVE-2022-25347 (path traversal). All versions prior to 1.9 are susceptible to writing arbitrary files to the file system due to CWE-37. ICS advisories recommend upgrading to 1.9 or later and applying network/access controls to reduce exposure; no public...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25980

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability in HandlerCommon.ashx across all versions prior to 1.9, allowing an attacker to inject arbitrary SQL, access/modify data, and execute system commands. The issue is confirmed in the connected documents, which also list...