Furkan Kutluca

Name of the Vulnerable Software and Affected Versions: Piramit Automation versions prior to 27.09.2024 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection', which allows Blind SQL Injection. This means that an attacker could potentially inject malicious SQL code into the application, allowing them to access or modify sensitive data without being detected. Recommendations: For versions prior to 27.09.2024, update to a version released after 27.09.2024 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation. Avoid using user-input data directly in SQL commands until the issue is resolved. At the moment, there is no information about additional mitigation measures.

The issue is related to improper protection for outbound error messages and alert signals, allowing account footprinting. This can potentially reveal sensitive information about user accounts.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks.

The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, which allows Cross-Site Scripting (XSS). This is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of the user's session.

The issue is related to improper protection for outbound error messages and alert signals, allowing account footprinting. This can potentially reveal sensitive information about user accounts.

The issue affects Group Arge Energy and Control Systems Smartpower Web, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.

The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of user input, potentially leading to unauthorized access to sensitive data.

The issue is related to improper input validation, which allows SQL Injection in Smartpower Web. This can be exploited due to the lack of proper validation of user input.

The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. This vulnerability allows for Server Side Request Forgery.