DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and delete database records.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7844-52dad-1.html |
Configurations
No configuration.
History
03 Jun 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-03 07:15
Updated : 2024-06-03 14:46
NVD link : CVE-2024-5311
Mitre link : CVE-2024-5311
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')