Lucene search
+L

7 matches found

attackerkb
attackerkb
•added 2024/05/03 3:16 a.m.•6 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.4AI score0.48168EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/05/03 3:16 a.m.•13 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.3AI score0.48168EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:16 a.m.•24 views

CVE-2023-51595

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS9.9AI score0.48168EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/03 2:15 a.m.•77 views

CVE-2023-51595

Vulnerability (CVE-2023-51595) : Voltronic Power ViewPower Pro is affected by a SQL injection in the selectDeviceListBy method. The flaw stems from insufficient validation of a user-supplied string used to build SQL queries, allowing an attacker to execute arbitrary code in the context of LOCAL S...

9.8CVSS9.9AI score0.48168EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•5 views

CVE-2023-51595: Improper Neutralization of Special Elements used in an SQL Command

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.7AI score0.48168EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/01/11 12:00 a.m.•12 views

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.48168EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•36 views

(0Day) Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the selectDeviceListBy method. The issue results from the lack of proper...

9.8CVSS8.1AI score0.48168EPSS
SaveExploits0
Rows per page
Query Builder