CVE-2024-37858

creationtimestamp| type| source ---|---|--- 2024-07-29 22:09:40+00:00| seen| https://t.me/cvedetector/1913...

CVE-2024-37858

The Lost and Found Information System 1.0 is vulnerable to a SQL Injection vulnerability. A remote attacker can escalate privileges by exploiting the id parameter within the php-lfis/admin/categories/manage_category.php endpoint. This vulnerability allows for unauthenticated Blind Time-Based SQL ...

Lost And Found Information System 1.0 SQL Injection

Exploit Title: Unauthenticated Blind Time-Based SQL Injection Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage:...