Show filters
78 Total Results
Displaying 21-30 of 78
Sort by:
Attacker Value
Unknown

CVE-2022-43457

Disclosure Date: November 17, 2022 (last updated October 27, 2023)
SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
Attacker Value
Unknown

CVE-2022-43506

Disclosure Date: November 17, 2022 (last updated October 27, 2023)
SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
Attacker Value
Unknown

CVE-2022-41775

Disclosure Date: November 17, 2022 (last updated October 27, 2023)
SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
Attacker Value
Unknown

CVE-2022-43447

Disclosure Date: November 17, 2022 (last updated October 27, 2023)
SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
Attacker Value
Unknown

CVE-2022-43774

Disclosure Date: October 26, 2022 (last updated December 22, 2024)
The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
Attacker Value
Unknown

CVE-2022-43775

Disclosure Date: October 26, 2022 (last updated December 22, 2024)
The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
Attacker Value
Unknown

CVE-2022-41702

Disclosure Date: October 25, 2022 (last updated December 22, 2024)
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.
Attacker Value
Unknown

CVE-2022-40965

Disclosure Date: October 25, 2022 (last updated December 22, 2024)
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.
Attacker Value
Unknown

CVE-2022-41651

Disclosure Date: October 25, 2022 (last updated December 22, 2024)
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.
Attacker Value
Unknown

CVE-2022-41701

Disclosure Date: October 25, 2022 (last updated December 22, 2024)
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.