CVE-2024-24312

SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...

CVE-2024-24312

A SQL injection vulnerability exists in Vaales Technologies V_QRS version v.2024-01-17 . This flaw allows a remote attacker to obtain sensitive information by targeting the Models/UserModel.php component. As a temporary workaround, it is recommended to restrict access to this specific component a...

CVE-2024-24312: Authorization Bypass Through User-Controlled Key

SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...