CVE-2022-27434

CVE-2022-27434 发现 UNIT4 TETA Mobile Edition 29HF13 在 errorReporting 页面中，通过 ProfileName 参数存在 SQL 注入漏洞。 该漏洞存在于应用程序生成的错误页面中（本例中：修改密码时）。在 ProfileName 参数中添加引号将生成 Oracle 数据库错误，说明输入未被过滤。 请求 响应 修复措施 该漏洞已通过其服务门户向 UNIT4 报告。补丁已可供下载（29.5.HF17）。...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

EUVD-2022-31937

Malicious code in bioql PyPI...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition (ME) prior to 29.5.HF17 contains a SQL injection in the errorReporting page via the ProfileName parameter. Affected product: UNIT4 TETA Mobile Edition (ME). Root cause: improper handling of the ProfileName input enabling SQL injection. Impact per CVSS: high confidentiali...

PT-2022-18425

Name of the Vulnerable Software and Affected Versions UNIT4 TETA Mobile Edition ME versions prior to 29.5.HF17 Description The issue is related to a SQL injection vulnerability. It can be exploited via the ProfileName parameter in the "errorReporting" page. Recommendations For versions prior to...

CVE-2022-27434: Improper Neutralization of Special Elements used in an SQL Command

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

UNIT4 TETA Mobile SQL注入漏洞

UNIT4 TETA Mobile is a web-based application from UNIT4. It can be used on desktop and mobile devices, including smartphones and tablets. A security vulnerability exists in UNIT4 TETA Mobile versions prior to 29.5.HF17 that stems from the ProfileName parameter in the bug report page containing an...