CVE-2025-32827: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'ActivateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-32867: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'CreateBackup' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-32823: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and wri...

CVE-2025-31352: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateGateways' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-31349: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateSmtpSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from...

CVE-2025-32825: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetProjects' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and wri...

CVE-2025-32844: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockUser' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and writ...

CVE-2025-32829: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockProjectCrossCommunications' method. This could allow an authenticated remote attacker to bypass authorization controls, t...

CVE-2025-30030: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'ImportDatabase' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

PT-2025-16825

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

CVE-2025-32870: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetTraces' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write...

CVE-2025-30003: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectConnections' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

PT-2025-16829

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16838

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16859

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description A SQL injection vulnerability has been identified in the affected application through the internally used UpdateWebServerGatewaySettings method. This could allow an authenticated...

PT-2025-16840

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16863

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16842

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16858

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description A SQL injection vulnerability has been identified in the affected application through the internally used UnlockBufferingSettings method. This could allow an authenticated remote...

PT-2025-16860

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...