CVE-2024-37857
July 29, 2024, 7:15 p.m.
Tags
Product(s) Impacted
Lost and Found Information System
- 1.0
Description
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php.
Weaknesses
Date
Published: July 29, 2024, 7:15 p.m.
Last Modified: July 29, 2024, 7:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
References
http://lost.com/
cve@mitre.org
https://packetstormsecurity.com/
cve@mitre.org
https://www.sourcecodester.com/
cve@mitre.org