Rekter0O

Name of the Vulnerable Software and Affected Versions: Roxy-WI versions 5.2.2.0 and earlier Description: The issue allows SQL Injection via the `check login` function, enabling an unauthenticated attacker to extract a valid `uuid` and bypass authentication. Recommendations: For Roxy-WI versions 5.2.2.0 and earlier, as a temporary workaround, consider disabling the `check login` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Roxy-WI versions 5.2.2.0 and earlier Description: The issue allows authenticated SQL injection via the `select servers` endpoint. This could potentially be exploited by authenticated attackers to inject malicious SQL code. Recommendations: For Roxy-WI versions 5.2.2.0 and earlier, as a temporary workaround, consider restricting access to the `select servers` endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.