SQL Injection Vulnerability in E-Negosyo System
CVE-2024-33958
7.5HIGH
What is CVE-2024-33958?
A SQL injection vulnerability exists in the E-Negosyo System's version 1.0, which permits attackers to craft malicious queries directed at the server. By exploiting this flaw, an attacker could gain unauthorized access to sensitive data, specifically targeting the 'phonenumber' information within the '/passwordrecover.php' script. This presents significant risks regarding the confidentiality and integrity of user data.
Affected Version(s)
E-Negosyo System 1.0