CVE-2024-0342

A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is the identifier assigned to this vulnerability.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2024-01-09 20:15

Updated : 2024-01-10 01:21


NVD link : CVE-2024-0342

Mitre link : CVE-2024-0342


JSON object : View

Products Affected

No product.

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')