9 matches found
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
Sql injection
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
CVE-2021-30176: Improper Neutralization of Special Elements used in an SQL Command
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...
ZEROF Expert pro SQL注入漏洞
ZEROF Expert pro is a mobile application for the ZEROF platform. For professional use by employees and agents of sellers involved in the inspection of insurance objects, collateralized assets, responsible for the display of goods at retail outlets. A SQL injection vulnerability exists in ZEROF...
PT-2021-18651
Name of the Vulnerable Software and Affected Versions ZEROF Expert pro version 2.0 Description The issue allows SQL Injection via the Authorization header to the "/v2/devices/add" endpoint. Recommendations For version 2.0, update the application to prevent SQL injection attacks, specifically by...