CVE-2024-23494

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23494 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23494

Delta Electronics DIAEnergie is affected by a SQL injection vulnerability (GetDIAE_unListParameters) in versions prior to v1.10.00.005. The issue is remotely exploitable with high impact (CVE-2024-23494, CVSS v3.1 score 8.8) and can lead to viewing or modifying backend data and potential persiste...