CVE-2023-24219: Improper Neutralization of Special Elements used in an SQL Command

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml...

PT-2023-19483

Name of the Vulnerable Software and Affected Versions LuckyframeWEB version 3.5 Description A SQL injection issue was found in LuckyframeWEB via the dataScope parameter at the "/system/UserMapper.xml" API endpoint. This allows for potential exploitation. Recommendations For LuckyframeWEB version...