CVE-2024-43468

CVE-2024-43468 is an unauthenticated SQL injection vulnerability in Microsoft Configuration Manager (ConfigMgr / SCCM) that can lead to remote code execution. Public exploit scripts (e.g., from Synacktiv) demonstrate SQL injections against the site database with MP_Location service that processes...