ZEROF Web Server 2.0 - SQL Injection
ZEROF Web Server 2.0 allows SQL Injection via the /HandleEvent endpoint. Attackers can exploit this vulnerability by manipulating the request parameters to execute arbitrary SQL queries. References: https://github.com/landigv/research/blob/main/cve/CVE-2022-25322.md https://nvd.nist.gov/vuln/detail/CVE-2022-25322 Remediation: Apply the latest security patches or updates provided by the vendor to fix the SQL Injection vulnerability in ZEROF Web Server 2.0.
9 assets checked · domain, subdomain, ipv4