CVE-2024-25532

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the btid parameter at /include/getdict.aspx...

CVE-2024-25532

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the btid parameter at /include/getdict.aspx...

CVE-2024-25532

CVE-2024-25532 affects RuvarOA v6.01 and v12.01. The vulnerability is a SQL injection via the bt_id parameter in /include/get_dict.aspx, as described across multiple sources (NVD/Red Hat/CVE listings). The initial data indicates a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no aut...