Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-3704

SQL Injection vulnerability in OpenGnsys

Description

SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQL code into login page to bypass it or even retrieve all the information stored in the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenGnsys OpenGnsys

Default version status: unaffected

  • 1.1.1daffected

References