CVE-2020-24841: Improper Neutralization of Special Elements used in an SQL Command

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

PT-2021-11075

Name of the Vulnerable Software and Affected Versions: PNPSCADA version 2.200816204020 Description: The issue allows SQL injection via the interf parameter in the "/browse.jsp" API endpoint. This could enable an attacker to compromise the application, access or modify data, or exploit latent...