diaenergie Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/diaenergie/ Thu, 23 Feb 2023 14:09:54 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png diaenergie Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/diaenergie/ 32 32 CVE-2021-32967 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32967/ Thu, 23 Feb 2023 14:09:54 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32967/ Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.

The post CVE-2021-32967 appeared first on CVE Vulnerability.

]]> Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.

The post CVE-2021-32967 appeared first on CVE Vulnerability.

]]> CVE-2022-43775 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43775/ Thu, 23 Feb 2023 05:21:13 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43775/ The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.

The post CVE-2022-43775 appeared first on CVE Vulnerability.

]]> The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.

The post CVE-2022-43775 appeared first on CVE Vulnerability.

]]> CVE-2022-43774 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43774/ Thu, 23 Feb 2023 05:21:13 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43774/ The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.

The post CVE-2022-43774 appeared first on CVE Vulnerability.

]]> The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.

The post CVE-2022-43774 appeared first on CVE Vulnerability.

]]> CVE-2022-43506 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43506/ Thu, 23 Feb 2023 05:21:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43506/ SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43506 appeared first on CVE Vulnerability.

]]> SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43506 appeared first on CVE Vulnerability.

]]> CVE-2022-43457 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43457/ Thu, 23 Feb 2023 05:21:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43457/ SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43457 appeared first on CVE Vulnerability.

]]> SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43457 appeared first on CVE Vulnerability.

]]> CVE-2022-43452 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43452/ Thu, 23 Feb 2023 05:21:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43452/ SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43452 appeared first on CVE Vulnerability.

]]> SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43452 appeared first on CVE Vulnerability.

]]> CVE-2022-43447 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43447/ Thu, 23 Feb 2023 05:21:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43447/ SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43447 appeared first on CVE Vulnerability.

]]> SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-43447 appeared first on CVE Vulnerability.

]]> CVE-2022-41775 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-41775/ Thu, 23 Feb 2023 05:20:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-41775/ SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-41775 appeared first on CVE Vulnerability.

]]> SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

The post CVE-2022-41775 appeared first on CVE Vulnerability.

]]> CVE-2022-41773 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-41773/ Thu, 23 Feb 2023 05:20:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-41773/ The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

The post CVE-2022-41773 appeared first on CVE Vulnerability.

]]> The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

The post CVE-2022-41773 appeared first on CVE Vulnerability.

]]> CVE-2022-41701 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-41701/ Thu, 23 Feb 2023 05:20:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-41701/ The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

The post CVE-2022-41701 appeared first on CVE Vulnerability.

]]> The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

The post CVE-2022-41701 appeared first on CVE Vulnerability.

]]>