CVE-2024-37858

creationtimestamp| type| source ---|---|--- 2024-07-29 22:09:40+00:00| seen| https://t.me/cvedetector/1913...

CVE-2024-37858

CVE-2024-37858 describes an SQL injection in Lost and Found Information System 1.0. The vulnerability exists in the id parameter of php-lfis/admin/categories/manage_category.php, enabling a remote attacker to escalate privileges. Public references indicate an unauthenticated, blind time-based SQL...

Lost And Found Information System 1.0 SQL Injection

Exploit Title: Unauthenticated Blind Time-Based SQL Injection Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage:...