← CVE Intelligence

CVE-2024-1301

Multiple Vulnerabilities in Badger Meter's Monitool PUBLISHED

Description (CNA)

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.

Affected (CNA)

Vendor / productVersions
Badger Meter / Monitoolaffected 4.6.3

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.