CVE-2023-1934

CVE-2023-1934 concerns SDG Technologies SDG PnPSCADA. The vulnerability is an unauthenticated, error-based PostgreSQL injection affecting the hitlogcsv.jsp endpoint, allowing remote attackers to read/modify data in the underlying database. Reported impact includes access to ICS/OT data and other ...

CVE-2020-24841

CVE-2020-24841 affects PNPSCADA 2.200816204020 and is due to an SQL injection in the parameter interf of /browse.jsp. Exploitation could let an attacker compromise the application and read/modify data or exploit latent database vulnerabilities. No remediation details are provided in the supplied ...