PT-2022-25666

Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to v1.9.01.002 Description The issue concerns a SQL injection in the GetDIAE line message settingsListParameters function. A low-privileged authenticated attacker could exploit this to inject arbitrary SQL queries...