CVE-2024-25513

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...

CVE-2024-25513

The RuvarOA office automation system, specifically versions v6.01 and v12.01 , contains a SQL injection vulnerability. The root cause is a lack of validation for the file_id parameter at the /CorporateCulture/kaizen_download.aspx endpoint against external SQL input. An attacker can exploit this t...

CVE-2024-25513

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...

CVE-2024-25513

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...