CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

CVE-2024-25512

CVE-2024-25512 affects RuvarOA v6.01 and v12.01. The vulnerability is a SQL injection in the /Bulletin/AttachDownLoad.aspx endpoint via the attach_id parameter, arising from input validation gaps. Impact described across sources includes the ability to execute arbitrary SQL and exfiltrate sensiti...