Talha Yildiz

**Name of the Vulnerable Software and Affected Versions** SYSGUARD 6001 versions 2.0.2 through 6.1.15.0 **Description** An issue exists in the web interface of the management interface where improper neutralization of special elements used in SQL commands allows for Blind SQL Injection. This occurs due to insufficient input validation or parameterization in backend database queries. An attacker with network access to the exposed interface can send crafted requests to infer database content, which may lead to unauthorized database access, credential theft, configuration tampering, and full system compromise. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SYSGUARD 6001 versions 2.0.2 through 6.1.3.9 **Description** Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.