CVE-2024-37765

Summary: CVE-2024-37765 affects Machform up to version 19 and is rooted in an authenticated blind SQL injection in the user account settings page (my_account.php), enabling time-based exfiltration via crafted requests. Exploitation details in the connected reports show the vulnerability occurs in...