Lucene search
+L

36 matches found

OSV
OSV
added 2023/04/14 9:15 a.m.12 views

CVE-2023-1863

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06...

9.8CVSS5.8AI score0.00718EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/14 9:15 a.m.17 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06...

7.5CVSS9.8AI score0.00718EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/14 8:14 a.m.60 views

CVE-2023-1863

Eskom Water Metering Software (handheld terminal) is affected by an SQL Injection vulnerability due to improper neutralization of input in the SQL command path, enabling potential Command Line Execution. Affected versions are prior to 23.04.06; CVSS metrics indicate high impact across confidentia...

9.8CVSS7.4AI score0.00718EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/14 8:14 a.m.29 views

CVE-2023-1863 SQLi in Eskom Computer Water Metering Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06...

9.8CVSS10AI score0.00718EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/14 8:14 a.m.11 views

CVE-2023-1863 SQLi in Eskom Computer Water Metering Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06...

9.8CVSS7.4AI score0.00718EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.8 views

Eskom Computer Water Metering Software SQL注入漏洞

Eskom Computer Water Metering Software is a handheld terminal application. A SQL injection vulnerability exists in Eskom Computer Water Metering Software versions prior to 23.04.06, which arises from an improper neutralization of a particular element used, and SQL injection...

9.8CVSS8.7AI score0.00718EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.17 views

PT-2023-17292

Name of the Vulnerable Software and Affected Versions Eskom Water Metering Software versions prior to 23.04.06 Description The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection. This is due to the improper neutralization of special...

9.8CVSS7.4AI score0.00718EPSS
SaveExploits0References6
NVD
NVD
added 2023/03/01 1:15 p.m.22 views

CVE-2023-1114

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...

9.8CVSS9.5AI score0.00691EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/01 1:15 p.m.7 views

CVE-2023-1114

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...

9.8CVSS5.8AI score0.00691EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/01 1:15 p.m.23 views

Authorization

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...

7.5CVSS9.3AI score0.00691EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/01 11:50 a.m.34 views

CVE-2023-1114 Improper Input Validation on e-Belediye

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100...

9.8CVSS9.6AI score0.00691EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/01 11:50 a.m.70 views

CVE-2023-1114

CVE-2023-1114 affects Eskom e-Belediye (versions 1.0.0.95 through 1.0.0.100). Root cause is Missing Authorization, enabling Information Elicitation. Impact is high confidentiality/integrity/availability risks per sources, with CVSS v3.1 base score 9.8 (Network, Low attack complexity, No privilege...

9.8CVSS7.3AI score0.00691EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/03/01 12:00 a.m.12 views

Eskom Bilgisayar e-Belediye 安全漏洞

Eskom Bilgisayar e-Belediye is an application from Eskom. A security vulnerability exists in Eskom Bilgisayar e-Belediye version 1.0.0.95 up to and including version 1.0.0.100, which stems from improper validation of user input. An attacker could exploit the vulnerability to obtain sensitive...

9.8CVSS8.3AI score0.00691EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/01 12:00 a.m.7 views

PT-2023-16765

Name of the Vulnerable Software and Affected Versions Eskom e-Belediye versions 1.0.0.95 through 1.0.0.100 Description The issue is related to a Missing Authorization vulnerability, which allows Information Elicitation in Eskom e-Belediye. Recommendations For versions 1.0.0.95 through 1.0.0.100,...

9.8CVSS7.3AI score0.00691EPSS
SaveExploits0References8
Openbugbounty
Openbugbounty
added 2021/09/28 12:57 a.m.23 views

uce-eskom-staging.ajourney.academy Cross Site Scripting vulnerability OBB-2151136

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2016/08/27 3:00 a.m.15 views

eskom.co.za XSS vulnerability

Vulnerable URL: http://www.eskom.co.za/sites/idm/Search/Pages/Results.aspx?k= Details: Description| Value ---|--- Patched:| Yes, at 16.07.2017 Latest check for patch:| 16.07.2017 23:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59773 VIP website status:| No...

6.3AI score
SaveExploits0
Rows per page
Query Builder