AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00678·Published 2024-07-15·Fixed in 2024-04-09-3302CWE-89
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00286·Published 2024-07-15·Fixed in 2024-04-09-3302CWE-79