CVE-2022-1374

Delta Electronics DIAEnergie is affected by a blind SQL injection in GetDemandAnalysisData and various handlers (e.g., DIAE_unHandler.ashx) across all versions prior to 1.8.02.004. The vulnerability allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and execute system ...

CVE-2022-1367

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-1366

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13833

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the ReadRegf function, allowing an attacker to inject arbitrary SQL queries. This enables the retrieval and modification of database...

PT-2022-13830

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in Handler TCV.ashx, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system...

PT-2022-13837

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the DIAE slogHandler.ashx component, allowing an attacker to inject arbitrary SQL queries. This enables the retrieval and modification ...

PT-2022-13831

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the ReadRegIND function, allowing an attacker to inject arbitrary SQL queries. This enables the retrieval and modification of database...

CVE-2022-1376: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEprivgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13832

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the ReadREGbyID function, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute syst...

CVE-2022-1377: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAErltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13836

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the DIAE unHandler.ashx file, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute...

CVE-2022-1369: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13838

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the DIAE privgrpHandler.ashx handler, allowing an attacker to inject arbitrary SQL queries. This enables the retrieval and modification...

CVE-2022-1367: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13839

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in DIAE rltHandler.ashx, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system...

CVE-2022-1378: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEpgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-13829

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in HandlerChart.ashx, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system...

CVE-2022-27104

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

CVE-2022-26631

CVE-2022-26631 affects the Automatic Question Paper Generator v1.0. The vulnerability is a time-based blind SQL injection exploitable through the id parameter in GET requests, enabling an attacker to infer data from the database. The issue is documented across multiple sources (NVD entry and seve...

PT-2022-17965

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator version 1.0 Description The issue is related to a Time-Based Blind SQL injection vulnerability. This vulnerability can be exploited via the id GET parameter in the API endpoint. Recommendations For Automatic...