CVE-2024-42361

Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/monitorId/metric/metricFull endpoint to download job metrics. In the process, it executes a SQL query with user-controlled data, allowing for SQL injection...

CVE-2024-42361: Improper Neutralization of Special Elements used in an SQL Command

Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/monitorId/metric/metricFull endpoint to download job metrics. In the process, it executes a SQL query with user-controlled data, allowing for SQL injection...

PT-2013-5225

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Service Operation Management Software Module versions affected versions not specified Description A SQL injection issue allows remote attackers to execute...