A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is the identifier assigned to this vulnerability.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-09 20:15
Updated : 2024-01-10 01:21
NVD link : CVE-2024-0342
Mitre link : CVE-2024-0342
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
