5 matches found
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25168
The snow snow software (specifically v.2.0.0 ) contains a SQL injection vulnerability within the system/role/list interface. An attacker can exploit the dataScope parameter to execute arbitrary code, potentially allowing them to access and manipulate sensitive data. While no patch version is curr...
