CVE-2024-29870

Publication date

2024-03-21 13:45:29

Family

INCIBE

State

PUBLISHED

Description

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, business_id parameter./sentrifugo/index.php/index/getdepartments/format/html, business_id parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it.