PT-2021-22104

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description A Blind SQL injection issue exists due to improper validation of the user-controlled value supplied through the egyid parameter in the "/DataHandler/HandlerEnergyType.ashx"...

PT-2021-20006

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description A Blind SQL injection issue exists due to improper validation of the user-controlled value supplied through the keyword parameter in the "/DataHandler/Handler CFG.ashx" endpoint...

PT-2021-22107

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description A Blind SQL injection issue exists in the "/DataHandler/HandlerAlarmGroup.ashx" endpoint. The application does not properly validate the user-controlled value supplied through t...

DIAEnergie SQL Blind Bet Vulnerability

A SQL blind injection vulnerability exists in the /DataHandler/HandlerCFG.ashx endpoint in DIAEnergie 1.7.5 and earlier versions. The vulnerability stems from the application not properly validating the value provided by the user via the parameter keyword before using the value as part of a SQL...

DIAEnergie SQL Blind Injection Vulnerability (CNVD-2021-93914)

A SQL blind injection vulnerability exists in the /DataHandler/AM/AMHandler.ashx endpoint in DIAEnergie 1.7.5 and earlier versions. The vulnerability stems from the application not properly validating the value provided by the user via parameter type before using the value as part of an SQL query...

DIAEnergie SQL Blind Injection Vulnerability (CNVD-2021-93913)

A SQL blind injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint in DIAEnergie 1.7.5 and earlier versions. The vulnerability stems from the application not properly validating the value provided by the user via the parameter agid before using the value as part of a S...