CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

Inventio Lite v4 and earlier is vulnerable to SQL Injection via the username parameter in /?action=processlogin. The issue arises from building an SQL query with user-supplied input (email/username) and password without proper parameter binding, enabling bypass of authentication and potential dat...