Description
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Enel X | JuiceBox Pro 3.0 22kW Cellular | ≤ 2.1.1.0_JB3VU096A | — |
Critical · 9.6
CVE-2023-29119
EUVD-2023-32722GHSA-9hvc-wrqf-m74c
Unauthorized SQLite Injection
Published Nov 5, 2024 · Updated Nov 5, 2024 · Assigned by ASRG