5 matches found
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
The software snow snow (also identified as DingFlow ) version 2.0.0 is vulnerable to a SQL injection vulnerability (CWE-89). A remote attacker can exploit the dataScope parameter of the system/role/list interface to execute arbitrary code. This flaw potentially allows an attacker to access and ma...
