CVE-2024-33292

SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2024-33292

SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2024-33292

SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2024-33292: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2024-33292

SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...

PT-2024-25189 · Unknown · Realisation Mgsd

Name of the Vulnerable Software and Affected Versions: Realisation MGSD version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the id parameter. Recommendations: For version 1.0, avoid using the id parameter in affected API endpoints unti...

CVE-2024-33292

Realisation MGSD v.1.0 is vulnerable to a SQL Injection vulnerability (CWE-89) that allows a remote attacker to obtain sensitive information . The root cause is the improper neutralization of special elements used in an SQL command via the id parameter . To mitigate this risk in version 1.0, it i...