Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php.CreditsAnna Breeva (PCAutomotive)Referenceshttps://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf