Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-30176 1 Zerof 1 Expert 2024-11-21 9.8 Critical
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.
CVE-2021-30175 1 Zerof 1 Web Server 2024-11-21 9.8 Critical
ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.