CVE-2024-57587 — n/a / n/a

Description (CNA)

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-57587.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.