Security Advisory
CVE-2024-46532
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component.