Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.0 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.4AI score0.48168EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/05/03 3:16 a.m.2 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.3AI score0.48168EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 3:16 a.m.14 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS9.9AI score0.48168EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 2:15 a.m.56 views

CVE-2023-51595

Vulnerability (CVE-2023-51595) : Voltronic Power ViewPower Pro is affected by a SQL injection in the selectDeviceListBy method. The flaw stems from insufficient validation of a user-supplied string used to build SQL queries, allowing an attacker to execute arbitrary code in the context of LOCAL S...

9.8CVSS9.9AI score0.48168EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.3 views

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.48168EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:0 a.m.27 views

(0Day) Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the selectDeviceListBy method. The issue results from the lack of proper...

9.8CVSS8.1AI score0.48168EPSS
Exploits0
Rows per page
Query Builder