CVE-2024-4658

CVE-2024-4658 is an SQL Injection vulnerability in TE Informatics Nova CMS, affecting versions prior to 5.0. Multiple connected sources attribute the issue to a Hibernate-related flaw that enables improper neutralization of SQL commands, allowing injection. The impact is described as a potential ...

CVE-2024-4658: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TE Informatics Nova CMS allows SQL Injection. This issue affects Nova CMS: before 5.0...