CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

KASO 安全漏洞

KASO is an application from KASO Inc. A security vulnerability exists in KASO v9.0, which stems from the discovery of an SQL injection vulnerability via the personid parameter in /cardcase/editcard.jsp...

CVE-2024-50724: Improper Neutralization of Special Elements used in an SQL Command

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 is vulnerable to a SQL injection flaw due to the improper neutralization of special elements in the person_id parameter at the /cardcase/editcard.jsp endpoint. This vulnerability allows for potential exploitation of the underlying database. As a mitigation, it is recommended to restrict...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

PT-2024-34402 · Kaso · Kaso

Name of the Vulnerable Software and Affected Versions: KASO version 9.0 Description: A SQL injection issue was discovered via the person id parameter at the "/cardcase/editcard.jsp" API endpoint. This allows for potential exploitation of the database. Recommendations: For KASO version 9.0, consid...