CVE-2024-12788

Codezips Technical Discussion Forum 1.0 contains an SQL injection in signinpost.php via the username parameter. The vulnerability can be triggered remotely, with exploits disclosed publicly; root cause is manipulation of the username argument. No official patch/version is stated; a PT-Security re...