CVE-2023-22324 (published 2023-01-30T00:00:00)
SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.
Affected products: Vendor: Contec Co., Ltd.
Product: CONPROSYS HMI System (CHS)
Versions: Ver.3.5.0 and earlier