CVE-2024-1301

Publication date

2024-03-12 15:24:43

Family

INCIBE

State

PUBLISHED

Description

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.