3 matches found
CVE-2024-53544: Improper Neutralization of Special Elements used in an SQL Command
NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...
CVE-2024-53543: Improper Neutralization of Special Elements used in an SQL Command
NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...
PT-2025-7799
Name of the Vulnerable Software and Affected Versions NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions 8.x through 8.6 Description A SQL injection issue was found in the getCookieNames method via the "smarttimeplus/MySQLConnection" endpoint. Recommendations For versions 8.x through 8....