PT-2022-17164

Name of the Vulnerable Software and Affected Versions Network Olympus version 1.8.0 Description The issue allows an authenticated admin user to inject SQL queries in "/api/eventinstance" via the sqlparameter JSON parameter. It is also possible to achieve remote code execution in the default...

CVE-2022-25225: Improper Neutralization of Special Elements used in an SQL Command

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...