4 matches found
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
7.8CVSS7.9AI score0.00315EPSS
SaveExploits1References1
CVE-2024-25513
CVE-2024-25513 affects RuvarOA v6.01 and v12.01, with a SQL injection vulnerability exploitable through the file_id parameter of /CorporateCulture/kaizen_download.aspx. The issue arises from lack of input validation on external SQL input, enabling an attacker to execute arbitrary SQL commands and...
7.8CVSS8.3AI score0.00315EPSS
SaveExploits1References1Affected Software1
20