← CVE Intelligence

CVE-2024-29724

Multiple vulnerabilities in SportsNET PUBLISHED

Description (CNA)

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to retrieve, update and delete all information in the database by sending a specially crafted SQL query: https://XXXXXXX.saludydesafio.com/ax/registerSp/, parameter idDesafio.

Affected (CNA)

Vendor / productVersions
SportsNET / SportsNETaffected 4.0.1

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.