Lucene search
+L

11 matches found

NVD
NVD
•added 2024/05/08 5:15 p.m.•19 views

CVE-2024-25528

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

5.9CVSS7.9AI score0.00279EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/08 4:15 p.m.•20 views

CVE-2024-25527

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

9.4CVSS5.8AI score0.00512EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/08 4:15 p.m.•41 views

CVE-2024-25527

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

9.4CVSS7.9AI score0.00512EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•5 views

CVE-2024-25527: Improper Neutralization of Special Elements used in an SQL Command

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

9.4CVSS5.9AI score0.00512EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/08 12:00 a.m.•19 views

CVE-2024-25528

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

8.3AI score0.00279EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/08 12:00 a.m.•31 views

CVE-2024-25527

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

8.3AI score0.00512EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/08 12:00 a.m.•82 views

CVE-2024-25528

The office automation system RuvarOA (versions v6.01 and v12.01 ) is susceptible to a SQL injection vulnerability. The flaw is triggered via the id parameter at the /PersonalAffair/worklog_template_show.aspx API endpoint. Attackers can exploit this to execute unauthorized SQL commands, potentiall...

5.9CVSS8.3AI score0.00279EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/05/08 12:00 a.m.•43 views

CVE-2024-25527

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

8.2AI score0.00512EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/08 12:00 a.m.•29 views

CVE-2024-25528

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

8.2AI score0.00279EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/08 12:00 a.m.•100 views

CVE-2024-25527

The RuvarOA office automation system, specifically versions v6.01 and v12.01 , is susceptible to a SQL injection vulnerability. The flaw exists in the /PersonalAffair/worklog_template_show.aspx file because the id parameter fails to properly validate externally entered SQL statements. An unauthen...

9.4CVSS8.3AI score0.00512EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•4 views

CVE-2024-25528: Improper Neutralization of Special Elements used in an SQL Command

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

5.9CVSS5.9AI score0.00279EPSS
SaveExploits1References1
Rows per page
Query Builder