The vulnerability of the /control/add_act.php file of the Kortex Lite Advocate Office Management System allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the /control/addact.php file of the Kortex Lite Advocate Office Management System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands via the MULTIPART aname parameter...