Delta Electronics DIAEnergie DIAE_tagHandler. ashx Script SQL Injection Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. An SQL injection vulnerability exists in the Delta Electronics DIAEnergie DIAEtagHandler. ashx script, which can be exploited by an attacker to view, add, modify, or delete information in...

Delta Electronics DIAEnergie License Issue Vulnerability (CNVD-2024-29664)

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...

Delta Electronics DIAEnergie GetDIAE_usList SQL Injection Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. Delta Electronics DIAEnergie GetDIAEusList suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end...

TOTOLINK X2000R Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

CVE-2024-28045 Delta Electronics DIAEnergie Cross-site scripting

Improper neutralization of input within the affected product could lead to cross-site scripting...

CVE-2024-28045 Delta Electronics DIAEnergie Cross-site scripting

Improper neutralization of input within the affected product could lead to cross-site scripting...

CVE-2024-25567 Delta Electronics DIAEnergie Path traversal

Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten...

CVE-2024-25567 Delta Electronics DIAEnergie Path traversal

Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten...

CVE-2024-28171 Delta Electronics DIAEnergie Path traversal

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten...

CVE-2024-23494 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23494 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEunListParameters...

CVE-2024-23975 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEslogListParameters...

CVE-2024-23975 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEslogListParameters...

CVE-2024-28040 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEastListParameters...

CVE-2024-28040 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAEastListParameters...

CVE-2024-25937 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script DIAEtagHandler.ashx...

CVE-2024-25937 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script DIAEtagHandler.ashx...

CVE-2024-28891 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script HandlerCFG.ashx...

CVE-2024-28891 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script HandlerCFG.ashx...

CVE-2024-28029 Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality...