CVE-2024-54820

XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login page. This vulnerability allows attackers to extract all usernames and passwords via a crafted input.

Score
CVSS 3.1 9.8 Critical
Status
Deferred - cve@mitre.org
Published
2025-02-24
Last modified
2025-02-24
Weaknesses
CWE-89

References

 
 
© AVABIS GmbH privacypolicy about