CVE-2024-37699

CVE-2024-37699 affects DataLife Engine (DLE) v1.7.1 and earlier; the issue is a SQL injection in the dboption component. The root cause is inadequate input handling in dboption leading to SQL injection, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, network attac...