CVE-2024-57765

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...

CVE-2024-57765

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...

CVE-2024-57765

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...

CVE-2024-57765

MSFM (Mysiteforme), a permission management system, is vulnerable to a SQL injection in versions prior to 2025.01.01 . The flaw exists because the s_name parameter at the table/list endpoint lacks proper validation of externally entered SQL statements. An attacker could exploit this to execute un...