CVE-2024-12894: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. This...

CVE-2024-12895: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function consolelog of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql injection. The attack can be launched...