CVE-2024-42533

A SQL injection vulnerability exists in the authentication module of Convivance StandVoice versions 4.5 through 6.2 . This flaw allows remote attackers to achieve arbitrary code execution by exploiting the GEST_LOGIN parameter. Proof-of-concept exploitation details have been published and seen in...

CVE-2024-42533: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbitrary code via the GESTLOGIN parameter...