7 matches found
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
Realisation MGSD v.1.0 is vulnerable to a SQL Injection vulnerability (CWE-89) that allows a remote attacker to obtain sensitive information . The root cause is the improper neutralization of special elements used in an SQL command via the id parameter . To mitigate this risk in version 1.0, it i...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
PT-2024-25189 · Unknown · Realisation Mgsd
Name of the Vulnerable Software and Affected Versions: Realisation MGSD version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the id parameter. Recommendations: For version 1.0, avoid using the id parameter in affected API endpoints unti...
CVE-2024-33292: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...