CVE-2024-41944

Xibo is a content management system CMS. An SQL injection vulnerability was discovered in the "report/data/proofofplayReport" API route inside the CMS. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the...

CVE-2024-41944: Improper Neutralization of Special Elements used in an SQL Command

Xibo is a content management system CMS. An SQL injection vulnerability was discovered in the report/data/proofofplayReport API route inside the CMS. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the...