CVE-2024-29875 SQL injection vulnerability in Sentrifugo

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sortname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it...

CVE-2024-29875

Summary: CVE-2024-29875 concerns a SQL injection in Sentrifugo 3.2 via the sort_name parameter in /sentrifugo/index.php/default/reports/exportactiveuserrpt. Several connected sources corroborate the flaw and its impact of potentially exposing all data. The available documents do not specify a fix...

CVE-2024-29875 SQL injection vulnerability in Sentrifugo

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sortname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it...