Description
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx.
Critical · 9.8
CVE-2024-25520
EUVD-2024-22848GHSA-96fg-696f-w9g3
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.a…
Published May 8, 2024 · Updated Aug 1, 2024 · Assigned by mitre