CVE-2024-32213

The CVE-2024-32213 entry concerns the LoMag WareHouse Management application. Affected software: LoMag WareHouse Management v1.0.20.120 and older. Root cause: by default, the system allows hard-coded passwords of 10 characters with little or no complexity, enabling weak authentication. Impact: we...

CVE-2024-32210

The Red Hat–listed CVEs map to LoMag LoMag Inventory Management v1.0.20.120 and earlier. Concrete issues include: hard-coded passwords by default for forms and SQL connections (CVE-2024-32210); local information disclosure via UserClass.cs and Settings.cs (CVE-2024-32211); SQL Injection via Artic...

CVE-2024-32211

The LoMag WareHouse Management application (versions 1.0.20.120 and older) is affected by multiple CVEs. CVE-2024-32211 enables local information disclosure through UserClass.cs and Settings.cs. CVE-2024-32212 exposes SQL Injection via ArticleGetGroups, DocAddDocument, ClassClickShop, and frmSett...

CVE-2024-32212

The CVE-2024-32212 entry affects LOGINT LoMag Inventory Management, version 1.0.20.120 and earlier. It describes a SQL injection vulnerability in the ArticleGetGroups, DocAddDocument, ClassClickShop, and frmSettings components that could allow an attacker to execute arbitrary code. This aligns wi...