36 matches found
CVE-2023-1863
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06...
CVE-2023-1863
Eskom Water Metering Software (handheld terminal) is affected by an SQL Injection vulnerability due to improper neutralization of input in the SQL command path, enabling potential Command Line Execution. Affected versions are prior to 23.04.06; CVSS metrics indicate high impact across confidentia...
CVE-2023-1863 SQLi in Eskom Computer Water Metering Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06...
CVE-2023-1863 SQLi in Eskom Computer Water Metering Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06...
Eskom Computer Water Metering Software SQL注入漏洞
Eskom Computer Water Metering Software is a handheld terminal application. A SQL injection vulnerability exists in Eskom Computer Water Metering Software versions prior to 23.04.06, which arises from an improper neutralization of a particular element used, and SQL injection...
PT-2023-17292
Name of the Vulnerable Software and Affected Versions Eskom Water Metering Software versions prior to 23.04.06 Description The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection. This is due to the improper neutralization of special...
CVE-2023-1114
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...
CVE-2023-1114
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...
Authorization
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...
CVE-2023-1114 Improper Input Validation on e-Belediye
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...
CVE-2023-1114
CVE-2023-1114 affects Eskom e-Belediye (versions 1.0.0.95 through 1.0.0.100). Root cause is Missing Authorization, enabling Information Elicitation. Impact is high confidentiality/integrity/availability risks per sources, with CVSS v3.1 base score 9.8 (Network, Low attack complexity, No privilege...
Eskom Bilgisayar e-Belediye 安全漏洞
Eskom Bilgisayar e-Belediye is an application from Eskom. A security vulnerability exists in Eskom Bilgisayar e-Belediye version 1.0.0.95 up to and including version 1.0.0.100, which stems from improper validation of user input. An attacker could exploit the vulnerability to obtain sensitive...
PT-2023-16765
Name of the Vulnerable Software and Affected Versions Eskom e-Belediye versions 1.0.0.95 through 1.0.0.100 Description The issue is related to a Missing Authorization vulnerability, which allows Information Elicitation in Eskom e-Belediye. Recommendations For versions 1.0.0.95 through 1.0.0.100,...
uce-eskom-staging.ajourney.academy Cross Site Scripting vulnerability OBB-2151136
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
eskom.co.za XSS vulnerability
Vulnerable URL: http://www.eskom.co.za/sites/idm/Search/Pages/Results.aspx?k= Details: Description| Value ---|--- Patched:| Yes, at 16.07.2017 Latest check for patch:| 16.07.2017 23:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59773 VIP website status:| No...