SQL Injection Vulnerabilities Affecting SportsNET's Version 4.0.1

CVE-2024-29724

What is CVE-2024-29724?

SQL injection vulnerabilities identified in SportsNET version 4.0.1 pose significant security risks, enabling attackers to execute specially crafted SQL queries. This exploitation can lead to unauthorized access, allowing malicious actors to retrieve, modify, and delete sensitive data in the underlying database. The vulnerability arises from insufficient input validation in the application, particularly in the parameter 'idDesafio' used during user registration. Organizations using this version should implement immediate mitigations and update to the latest patched version to safeguard against potential data breaches.

References