← CVE Intelligence

CVE-2024-5311

DigiWin EasyFlow .NET - SQL Injection PUBLISHED

Description (CNA)

DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and delete database records.

Affected (CNA)

Vendor / productVersions
DigiWin / EasyFlow .NETaffected 5.x; affected 6.1.x; affected 6.6.x before 6.6.16

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.