Multiple SQL injection vulnerabilities on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 allow remote attackers to execute arbitrary SQL commands via (1) the inverterselect parameter in a primo action to dettagliinverter.php or (2) the lingua parameter to changelanguagesession.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2012-11-23T11:00:00

Updated: 2024-08-06T21:21:27.275Z

Reserved: 2012-11-14T00:00:00

Link: CVE-2012-5861

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-11-23T12:09:58.367

Modified: 2024-11-21T01:45:23.233

Link: CVE-2012-5861

cve-icon Redhat

No data.