CVE-2024-39250

EfroTech Timetrax v8.3 contains an unauthenticated SQL injection vulnerability located in the q parameter of the search web interface. An unauthenticated attacker can exploit this flaw to execute SQL commands, potentially allowing them to extract or modify sensitive database information . While a...

Exploit for SQL Injection in Efrotech Timetrax

CVE-2024-39250 PoC nuclei template Efrotech's http://ww...