Sql injection

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-0734 Smsot get.php sql injection

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-0734

Smsot up to 2.12 contains a SQL injection in the get.php endpoint triggered by manipulating the tid parameter. The vulnerability arises from an insecure handling of tid, enabling remote exploitation. According to multiple sources, this affects Smsot versions up to 2.12 and can impact confidential...