CVE-2022-26069 Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerPageKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26069 Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerPageKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system...

CVE-2022-25347

Delta Electronics DIAEnergie is affected by CVE-2022-25347 (path traversal). All versions prior to 1.9 are susceptible to writing arbitrary files to the file system due to CWE-37. ICS advisories recommend upgrading to 1.9 or later and applying network/access controls to reduce exposure; no public...

CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system...

CVE-2022-25980

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability in HandlerCommon.ashx across all versions prior to 1.9, allowing an attacker to inject arbitrary SQL, access/modify data, and execute system commands. The issue is confirmed in the connected documents, which also list...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26059

Delta Electronics DIAEnergie is affected by CVE-2022-26059: a blind SQL injection in GetQueryData allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and execute system commands in all versions prior to 1.8.02.004 (per initial description) and up to at least 1.9 per ICS...

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-17228

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue allows an attacker to perform path traversal attacks, potentially enabling them to write arbitrary files to various locations on the file system. Recommendations F...

PT-2022-13529

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in HandlerDialog KID.ashx. This vulnerability allows an attacker to inject arbitrary SQL queries, which can lead to...

PT-2022-18091

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in "HandlerExport.ashx/Calendar". This allows an attacker to inject arbitrary SQL queries, retrieve and modify...

PT-2022-17646

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the GetQueryData function. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database...

PT-2022-18092

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is related to an incorrect default permission in the DIAEnergie application. This may allow an attacker to plant new files, such as DLLs, or replace existing...

PT-2022-17796

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the HandlerPageP KID.ashx and DIAE hierarchyHandler.ashx handlers. This allows an attacker to inject arbitrary SQL queries, retrieve an...

PT-2022-17650

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in HandlerPage KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database...

PT-2022-18267

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in GetCalcTagList, allowing an attacker to inject arbitrary SQL queries. This enables the retrieval and modificatio...

PT-2022-17633

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the DIAE dmdsetHandler.ashx handler. This allows an attacker to inject arbitrary SQL queries, retrieve and modif...