2 matches found
CVE-2024-53544: Improper Neutralization of Special Elements used in an SQL Command
NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...
9.8CVSS5.8AI score0.00419EPSS
SaveExploits0References1
CVE-2024-53543: Improper Neutralization of Special Elements used in an SQL Command
NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...
5.4CVSS5.8AI score0.0024EPSS
SaveExploits0References1
20