CVE-2024-28389

SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail method...

CVE-2024-28389

CVE-2024-28389 describes a SQL injection vulnerability in KnowBand SpinWheel, affecting v3.0.3 and earlier. The flaw resides in the SpinWheelFrameSpinWheelModuleFrontController::sendEmail() path and can allow a remote attacker to cause privilege escalation and access sensitive information. Affect...

CVE-2024-28389

SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail method...