← CVE Intelligence

CVE-2022-26338

Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx PUBLISHED

Description (CNA)

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected (CNA)

Vendor / productVersions
Delta Electronics / DIAEnergieaffected unspecified before 1.8.02.004

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.