CVE-2024-50724

creationtimestamp| type| source ---|---|--- 2024-11-15 15:31:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113487688879753162 2024-11-15 18:17:21+00:00| seen| https://t.me/cvedetector/11104...

CVE-2024-50724

KASO v9.0 is vulnerable to a SQL injection flaw due to the improper neutralization of special elements in the person_id parameter at the /cardcase/editcard.jsp endpoint. This vulnerability allows for potential exploitation of the underlying database. As a mitigation, it is recommended to restrict...