CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724: Improper Neutralization of Special Elements used in an SQL Command

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-50724

KASO v9.0 is vulnerable to a SQL injection flaw due to the improper neutralization of special elements in the person_id parameter at the /cardcase/editcard.jsp endpoint. This vulnerability allows for potential exploitation of the underlying database. As a mitigation, it is recommended to restrict...

CVE-2024-50724

KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...

CVE-2024-2592: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/picshow.php, in the 'personid' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...