CVE-2024-44541

Description

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."

Affected Platforms

Weakness Type

CWE-89

References

• https://github.com/evilnapsis/inventio-lite
• https://github.com/pointedsec/CVE-2024-44541/