4 matches found
CVE-2024-25521
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txtkeyword parameter at getcompany.aspx...
9.4CVSS7.9AI score0.00618EPSS
SaveExploits1References1
CVE-2024-25521
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txtkeyword parameter at getcompany.aspx...
9.4CVSS5.8AI score0.00618EPSS
SaveExploits1References1
CVE-2024-25521
CVE-2024-25521 affects RuvarOA v6.01 and v12.01. A SQL injection vulnerability exists in the get_company.aspx endpoint via the txt_keyword parameter, caused by lack of input validation against external SQL statements. Reported impact includes the ability to perform illegal SQL commands to access ...
9.4CVSS8.3AI score0.00618EPSS
SaveExploits1References1Affected Software1
20