Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/24 12:00 a.m.•6 views

CVE-2024-41550: Improper Neutralization of Special Elements used in an SQL Command

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

7.2CVSS5.8AI score0.00488EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/24 12:00 a.m.•86 views

CVE-2024-41550

The CampCodes Supplier Management System v1.0 is vulnerable to SQL injection (CWE-89) via the Supply_Management_System/admin/view_invoice_items.php?id= endpoint. This vulnerability allows an attacker to interfere with the queries that the application makes to its database. While exploitation deta...

7.2CVSS5.8AI score0.00488EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder