5 matches found
CVE-2024-25523
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /filemanage/filememo.aspx...
CVE-2024-25523
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /filemanage/filememo.aspx...
CVE-2024-25523: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /filemanage/filememo.aspx...
CVE-2024-25523
The office automation system RuvarOA versions v6.01 and v12.01 is vulnerable to a SQL injection flaw. The root cause is a lack of validation for the file_id parameter within the /filemanage/file_memo.aspx endpoint against external SQL input. An attacker can exploit this to execute unauthorized SQ...
