Delta Industrial Automation DIAEnergie SQL Injection (CVE-2022-1378)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error...

CVE-2022-1378

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability (CVE-2022-1378) in the DIAE_pgHandler.ashx component, impacting all versions prior to the fixed release. The issue enables an attacker to inject arbitrary SQL, potentially retrieve/modify database contents and execute...