CVE-2024-42533

CVE-2024-42533 describes a SQL injection in the authentication module of Convivance StandVoice versions 4.5–6.2 , allowing a remote attacker to execute arbitrary code via the GEST_LOGIN parameter. The issue stems from improper handling of authentication input, enabling code execution with high im...