CVE-2024-45876

The baltic-it TOPqw Webportal version v1.35.283.2 is vulnerable to an SQL injection flaw located in the login form at /Apps/TOPqw/Login.aspx. The root cause is the improper neutralization of special elements in the txtUsername POST parameter, which allows an attacker to manipulate SQL queries. Th...