Faydam Datalogger
Monthly
SQL injection in FAYDAM Datalogger (versions 2.7.1 up to but not including 2.8.0) lets remote attackers inject arbitrary SQL commands through improperly neutralized input, per a TR-CERT advisory. With a CVSS vector of PR:N/UI:N, exploitation requires no authentication or user interaction, exposing the backing database to full read, modification, and destruction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; no EPSS score was supplied.
SQL injection in FAYDAM Datalogger (versions 2.7.1 up to but not including 2.8.0) lets remote attackers inject arbitrary SQL commands through improperly neutralized input, per a TR-CERT advisory. With a CVSS vector of PR:N/UI:N, exploitation requires no authentication or user interaction, exposing the backing database to full read, modification, and destruction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; no EPSS score was supplied.