CVE-2024-28322

A SQL Injection vulnerability exists in PuneethReddyHC Event Management version 1.0 within the /event-management-master/backend/register.php API endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the event_id parameter. Attackers can exploit thi...