CVE-2024-4228

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO Single Sign On allows SQL Injection. This issue...

CVE-2024-4228 SQLi in Magarsus Consultancy's SSO

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO Single Sign On allows SQL Injection. This issue...

PT-2024-31881

Name of the Vulnerable Software and Affected Versions Magarsus Consultancy SSO Single Sign On versions 1.0 through 1.1 Description The issue allows manipulation of hidden fields through URL redirection to untrusted sites, also known as an 'Open Redirect'. This can potentially be used to manipulat...

PT-2024-29831

Name of the Vulnerable Software and Affected Versions Magarsus Consultancy SSO versions 1.0 through 1.1 Description The issue is related to SQL Injection, which allows for the exposure of sensitive information to unauthorized actors and insufficiently protected credentials. This is due to the...

CVE-2024-4604: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Magarsus Consultancy SSO Single Sign On allows Manipulating Hidden Fields. This issue affects SSO Single Sign On: from 1.0 before 1.1...

CVE-2024-4228: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO Single Sign On allows SQL Injection. This issue...