Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx

SQL injection vulnerability exists in GetDIAE_astListParameters

Path traversal attack is possible and write outside of the intended directory and may access sensitive information

SQL injection vulnerability exists in GetDIAE_slogListParameters

SQL injection vulnerability exists in GetDIAE_unListParameters

SQL injection vulnerability exists in the script Handler_CFG.ashx

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality

SQL injection vulnerability exists in the script DIAE_tagHandler.ashx

The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access…

SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

It is possible to perform a path traversal attack and write outside of the intended directory

Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to…

A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the…

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP

Improper Access Control in DIAEnergie

Reflected Cross-site Scripting in DIAEnergie

Reflected Cross-site Scripting in DIAEnergie

Reflected Cross-site Scripting in DIAEnergie

Stored Cross-site Scripting in DIAEnergie

A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts…

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script…

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script…

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script…

DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”

Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm

Improper neutralization of input within the affected product could lead to cross-site scripting

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

Delta Electronics DIAEnergie

Authorization Bypass Through User-Controlled Key in DIAEnergie

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action…