5 matches found
CVE-2024-25532
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the btid parameter at /include/getdict.aspx...
CVE-2024-25532
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the btid parameter at /include/getdict.aspx...
CVE-2024-25532
RuvarOA, an office automation system by China Ruvar Company, versions 6.01 through 12.01 , is vulnerable to a SQL injection vulnerability. The flaw exists in the bt_id parameter at the /include/get_dict.aspx API endpoint, which may allow for potential exploitation. As of the current documentation...
RuvarOA 安全漏洞
RuvarOA is an office automation system of China Ruvar Company. A security vulnerability exists in RuvarOA v6.01 and v12.01, which is caused by a SQL injection vulnerability in the btid parameter of the /include/getdict.aspx file...