CVE-2024-46532: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...