Description
Scan2Net® 平台是 Image Access 所有 WideTEK® 和 Bookeye®扫描仪的技术基础。Scan2Net®系统存在sql注入漏洞，攻击者可利用此漏洞获取数据库敏感信息。
Scan2Net存在sql注入漏洞(CVE-2024-28145)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-28145
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-image-access-scan2net/
https://cve.imfht.com/detail/CVE-2024-28145?lang=en
https://cve.akaoma.com/cve-2024-28145
https://vulners.com/cve/CVE-2024-28145
https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2024-28145