CVE-2024-25528

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

CVE-2024-25528

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

CVE-2024-25527: Improper Neutralization of Special Elements used in an SQL Command

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...

CVE-2024-25527

RuvarOA , an office automation system, is vulnerable to a SQL injection flaw in versions v6.01 and v12.01 . The root cause is a lack of validation for externally entered SQL statements via the id parameter at the /PersonalAffair/worklog_template_show.aspx endpoint. An unauthenticated attacker can...

CVE-2024-25528: Improper Neutralization of Special Elements used in an SQL Command

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklogtemplateshow.aspx...