Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-9921

TEAMPLUS TECHNOLOGY Team+ - SQL Injection

Description

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

teamplus technology team+

Default version status: unaffected

  • 13.5.*affected

References