Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-9925

SQL injection in QPLANT by TAI Smart Factory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TAI Smart Factory QPLANT SF

Default version status: unaffected

  • 1.0affected

References