Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•1 views

CVE-2024-53544: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

9.8CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•1 views

CVE-2024-53543: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

5.4CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder