CVE-2023-1934

CVE-2023-1934 concerns SDG Technologies SDG PnPSCADA. The vulnerability is an unauthenticated, error-based PostgreSQL injection affecting the hitlogcsv.jsp endpoint, allowing remote attackers to read/modify data in the underlying database. Reported impact includes access to ICS/OT data and other ...

SDG Technologies PnPSCADA SQL注入漏洞

SDG Technologies PnPSCADA is an automated meter reading solution from SDG Technologies. SDG Technologies PnPSCADA suffers from a SQL injection vulnerability. An attacker exploiting this vulnerability could interact with the underlying database...

CVE-2023-1934: Improper Neutralization of Special Elements used in an SQL Command

The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulnerability. Present within the hitlogcsv.jsp endpoint, this security flaw permits unauthenticated attackers to engage with the underlying database seamlessly and...

PT-2023-3021 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PnPSCADA affected versions not specified Description: The PnPSCADA system is affected by a critical unauthenticated error-based PostgreSQL Injection vulnerability. This security flaw is present within the "hitlogcsv.jsp" endpoint, allowing...

Sdg PNPSCADA SQL Injection (CVE-2020-24841)

An SQL injection vulnerability exists in Sdg PNPSCADA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-24841

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24841

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

Sql injection

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24841

CVE-2020-24841 affects PNPSCADA 2.200816204020 and is due to an SQL injection in the parameter interf of /browse.jsp. Exploitation could let an attacker compromise the application and read/modify data or exploit latent database vulnerabilities. No remediation details are provided in the supplied ...

CVE-2020-24841

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24841: Improper Neutralization of Special Elements used in an SQL Command

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

PT-2021-11075

Name of the Vulnerable Software and Affected Versions: PNPSCADA version 2.200816204020 Description: The issue allows SQL injection via the interf parameter in the "/browse.jsp" API endpoint. This could enable an attacker to compromise the application, access or modify data, or exploit latent...

PNPSCADA SQL Injection Vulnerability

A SQL injection vulnerability exists in PNPSCADA that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...

CVE-2020-24842

PNPSCADA 2.200816204020 allows cross-site scripting XSS, which can execute arbitrary JavaScript in the victim's browser...

Cross site scripting

PNPSCADA 2.200816204020 allows cross-site scripting XSS, which can execute arbitrary JavaScript in the victim's browser...

CVE-2020-24842

PNPSCADA 2.200816204020 allows cross-site scripting XSS, which can execute arbitrary JavaScript in the victim's browser...

CVE-2020-24842

The CVE-2020-24842 entry concerns PNPSCADA 2.200816204020, where a cross-site scripting (XSS) flaw can execute arbitrary JavaScript in a victim’s browser. The connected sources (including Red Hat and NVD entries) confirm the affected product/version and the XSS impact, but do not provide concrete...

PNPSCADA Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in PNPSCADA that stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

PT-2021-11076

Name of the Vulnerable Software and Affected Versions: PNPSCADA version 2.200816204020 Description: The issue allows cross-site scripting XSS, which can execute arbitrary JavaScript in the victim's browser. This means an attacker could potentially inject malicious scripts into a website, allowing...

CVE-2020-24842: Improper Neutralization of Input During Web Page Generation

PNPSCADA 2.200816204020 allows cross-site scripting XSS, which can execute arbitrary JavaScript in the victim's browser...