CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

CVE-2024-57587

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zlejutx2i 2025-01-31 23:24:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3689 2025-02-01 01:16:25+00:00|...

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

CVE-2024-57587

Multiple SQL injection vulnerabilities exist in EasyVirt DCScope (versions 8.6.0 and earlier) and EasyVirt CO2Scope (versions 1.3.0 and earlier). These flaws allow remote unauthenticated attackers to execute arbitrary SQL commands by exploiting the username or password parameters at the /api/auth...