Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•5 views

CVE-2024-53544: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

9.8CVSS5.9AI score0.00419EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•4 views

CVE-2024-53543: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

5.4CVSS5.9AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/24 12:00 a.m.•5 views

PT-2025-7799

Name of the Vulnerable Software and Affected Versions NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions 8.x through 8.6 Description A SQL injection issue was found in the getCookieNames method via the "smarttimeplus/MySQLConnection" endpoint. Recommendations For versions 8.x through 8....

9.8CVSS5.6AI score0.00419EPSS
SaveExploits0References7
Rows per page
Query Builder