CVE-2024-4658

CVE-2024-4658 is an SQL Injection vulnerability in TE Informatics Nova CMS, affecting versions prior to 5.0. Multiple connected sources attribute the issue to a Hibernate-related flaw that enables improper neutralization of SQL commands, allowing injection. The impact is described as a potential ...

CVE-2024-4658: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TE Informatics Nova CMS allows SQL Injection. This issue affects Nova CMS: before 5.0...

PT-2024-32050

Name of the Vulnerable Software and Affected Versions TE Informatics Nova CMS versions prior to 5.0 Description A SQL Injection vulnerability exists in TE Informatics Nova CMS due to a Hibernate flaw. This issue allows for SQL Injection, which can be exploited. Recommendations For TE Informatics...