Delta Electronics DIAEnergie SQL Injection (CVE-2022-1366)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to insufficient input validation when processing requests...

CVE-2022-1366

Delta Electronics DIAEnergie is affected by CVE-2022-1366. A blind SQL injection exists in HandlerChart.ashx across all versions before 1.8.02.004, allowing an attacker to inject arbitrary SQL, retrieve/modify data, and execute system commands. The issue stems from insufficient input validation i...