Unknown · Xone Web Monitor · CVE-2024-54820
**Name of the Vulnerable Software and Affected Versions**
XOne Web Monitor version 02.10.2024.530
XOne Web Monitor framework version 1.0.4.9
**Description**
The issue is a SQL injection vulnerability located in the login page, allowing attackers to extract all usernames and passwords via a crafted input.
**Recommendations**
For XOne Web Monitor version 02.10.2024.530, consider disabling the login page functionality until a patch is available.
For XOne Web Monitor framework version 1.0.4.9, restrict access to the login page to minimize the risk of exploitation.
Avoid using the login page with crafted inputs until the issue is resolved.