CVE-2024-25524

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sysfilestorageid parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx...

CVE-2024-25524

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sysfilestorageid parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx...

CVE-2024-25524

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sysfilestorageid parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx...

CVE-2024-25524

CVE-2024-25524 affects RuvarOA v6.01 and v12.01, where a SQL injection is exploitable via the sys_file_storage_id parameter in /WorkPlan/WorkPlanAttachDownLoad.aspx. The root cause is lack of input validation in that parameter, enabling arbitrary SQL execution and potential data disclosure/altera...