CVE-2024-22856

The Axefinance Axe Credit Portal (versions 3.0 and later ) is vulnerable to a SQL injection vulnerability within the Save Favorite Search function. An authenticated attacker can leverage this flaw by sending crafted requests to execute unintended queries and disclose sensitive information from da...