| Package | Affected versions | Patched versions |
|---|---|---|
| diaenergie | < 1.10.01.004 | 1.10.01.004 |
An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free