CVE-2024-28145

The Image Access Scan2Net software (versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier) is vulnerable to an unauthenticated SQL injection . An attacker can exploit the /class/dbconnect.php file by supplying malicious GET parameters, specifically the search, table, field, and value...