PT-2024-31170

Name of the Vulnerable Software and Affected Versions todesk version 1.1 Description The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/todesk.com/news.html" API endpoint, where a parameter is vulnerable to SQL injection. No information is provided about the...