CVE-2024-25533

Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website /WorkFlow/OfficeFileUpdate.aspx. This vulnerability can allow attackers to write files to the server or execute arbitrary commands via crafted SQL statements...

CVE-2024-25533

Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website /WorkFlow/OfficeFileUpdate.aspx. This vulnerability can allow attackers to write files to the server or execute arbitrary commands via crafted SQL statements...

CVE-2024-25533

The office automation system RuvarOA versions 6.01 through 12.01 is vulnerable to a SQL injection flaw. The root cause is a lack of validation for external SQL statements within the /WorkFlow/OfficeFileUpdate.aspx file. This vulnerability can leak the website's physical path through error message...