CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions v8.x through v8.6 are susceptible to a SQL injection vulnerability. The flaw exists in the addProject method within the smarttimeplus/MySQLConnection endpoint. While separate documentation mentions a different issue regarding improper a...