CVE-2024-57587: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

CVE-2024-55062: Improper Neutralization of Special Elements used in a Command

Code Injection vulnerability in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/...

CVE-2024-57587

Multiple SQL injection vulnerabilities exist in EasyVirt DCScope (versions 8.6.0 and earlier) and EasyVirt CO2Scope (versions 1.3.0 and earlier). These flaws allow remote unauthenticated attackers to execute arbitrary SQL commands by exploiting the username or password parameters at the /api/auth...