CVE-2024-0342 — Inis Sqlite.php sql injection

Description (CNA)

A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is the identifier assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
n/a / Inis	affected 2.0.0; affected 2.0.1

CWE

CWE-89

References

https://vuldb.com/?id.250110
https://vuldb.com/?ctiid.250110
https://note.zhaoj.in/share/nWYJHrmUqv7i

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.250110
https://vuldb.com/?ctiid.250110
https://note.zhaoj.in/share/nWYJHrmUqv7i

CISA-ADP

No English description supplied.

No references supplied.