CVE-2024-25937

HIGH

deltaww diaenergie < 1.10.00.005 - SQL Injection via DIAE_tagHandler.ashx

Title source: llm

SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.

Core 1

Core References

Third Party Advisory, US Government Resource

CVSS v3 8.8

EPSS 0.0118

EPSS Percentile 79.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-89

Status published

Products (1)

deltaww/diaenergie < 1.10.00.005

Published Mar 21, 2024

Tracked Since Feb 18, 2026