CVE-2023-42242

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...

CVE-2023-42242

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...

CVE-2023-42242

creationtimestamp| type| source ---|---|--- 2025-01-13 21:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113823275991993622 2025-01-13 22:09:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1414 2025-01-13 22:16:24+00:00| seen|...

CVE-2023-42242

An authenticated attacker can perform SQL Injection in the GET parameter of the /monitor/s_terminal.php endpoint in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The root cause is the improper neutralization of special elements used in an SQL command (CWE-89 ). To remediate this,...