Security Advisory

CVE-2024-37857

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-29 00:00:00
Last updated 2024-08-02 03:57:39
Assigner mitre
State PUBLISHED

Description

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php.