CVE-2024-29730

CVE-2024-29730 affects SportsNET, version 4.0.1. A SQL injection in the /app/ax/consejoRandom/ endpoint (parameter idCat) could let an attacker retrieve, update, and delete database information. Exploitation details are not provided in the sources; no patch/version fix is listed. Some references ...