CVE-2024-13007

CVE-2024-13007 affects Codezips Event Management System 1.0, where an SQL injection can be triggered in the /contact.php file by manipulating the title argument. The vulnerability is network-exploitable and allows remote access with no user interaction required, as described in multiple sources. ...