CVE-2022-25980

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability in HandlerCommon.ashx across all versions prior to 1.9, allowing an attacker to inject arbitrary SQL, access/modify data, and execute system commands. The issue is confirmed in the connected documents, which also list...