← CVE Intelligence

CVE-2024-11504

SQL Injection in Streamsoft Prestiż PUBLISHED

Description (CNA)

Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an authenticated remote attacker.  This issue was fixed in 18.1.376.37 version of the software.

Affected (CNA)

Vendor / productVersions
Streamsoft / Streamsoft Prestiżaffected 0 before 18.1.376.37

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.