CVE-2024-26264 — EBM Technologies RISWEB - SQL Injection
EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attacker…
Published: 2024-02-15 · CVSS: 9.8 · CVSS 3.1
EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7