CVE-2024-57587 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Multiple SQL injection vulnerabilities in EasyVirt DCScope
Critical CVSS: 9.1

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login.
Vendor
Easyvirt
Product
Co2scope
CWE
CWE-89
Yayın Tarihi
2025-01-31 22:15:13
Güncelleme
2025-05-24 01:19:45
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

Referanslar