CVE-2024-50584

An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the /class/templateio.php file and supplying malicious GET parameters. The "templates" parameter is vulnerable against blind boolean-based SQL injection attacks. SQL syntax must be injected into the...

CVE-2024-50584

An authenticated attacker with the "Poweruser" role can perform a blind boolean-based SQL injection in Image Access Scan2Net (versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier) and SoftwareX . The vulnerability exists because the /class/template_io.php file improperly handles the...