CVE-2022-0923

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

• CWE-89
• CWE-89

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource

Published

Mar 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0916An issue was discovered in Logitech Options. The OAuth 2.0 s…8.8
• CVE-2022-0918A vulnerability was discovered in the 389 Directory Server t…7.5
• CVE-2022-0919The Salon booking system Free and pro WordPress plugins befo…5.3
• CVE-2022-0920The Salon booking system Free and Pro WordPress plugins befo…7.5
• CVE-2022-0921Abusing Backup/Restore feature to achieve Remote Code Execut…6.7
• CVE-2022-0922The software does not perform any authentication for critica…6.5
• CVE-2022-0924Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows a…5.5
• CVE-2022-0925Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-0926File upload filter bypass leading to stored XSS in GitHub re…4.8
• CVE-2022-0928Cross-site Scripting (XSS) - Stored in GitHub repository mic…5.4
• CVE-2022-0929XSS on dynamic_text module in GitHub repository microweber/m…6.1
• CVE-2022-0930File upload filter bypass leading to stored XSS in GitHub re…4.8