CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

evilnapsis Inventio Lite versions v4 and before are vulnerable to SQL Injection in the /?action=processlogin endpoint. The root cause is the improper neutralization of special elements in the username parameter, which allows attackers to inject arbitrary SQL queries via POST requests. This flaw c...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541: Improper Neutralization of Special Elements used in an SQL Command

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...