CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

CVE-2024-53543 affects NovaCHRON Zeitsysteme Smart Time Plus (v8.x to v8.6). The vulnerability is a SQL injection via the addProject method in the smarttimeplus/MySQLConnection endpoint. Connected sources confirm the affected versions and the vulnerable component but do not provide exploit detail...