Skip to content
OpenAdvisories

Product · riclolsen

json-scada

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API

    JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, S…