5 matches found
CVE-2024-50724
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724: Improper Neutralization of Special Elements used in an SQL Command
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724
KASO v9.0 is vulnerable to a SQL injection flaw due to the improper neutralization of special elements in the person_id parameter at the /cardcase/editcard.jsp endpoint. This vulnerability allows for potential exploitation of the underlying database. As a mitigation, it is recommended to restrict...
