Description
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Enel X | JuiceBox Pro 3.0 22kW Cellular | ≤ 2.1.1.0_JB3VU096A | — |
Critical · 9.6
CVE-2023-29118
EUVD-2023-32721GHSA-q634-78mh-cmgq
Unauthorized SQLite Injection in Enel X Juicebox
Published Nov 5, 2024 · Updated Nov 5, 2024 · Assigned by ASRG