Description
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit
Critical · 9.8
CVE-2024-24015
EUVD-2024-21441GHSA-jxjp-cv56-m425
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort p…
Published Feb 6, 2024 · Updated Jun 20, 2025 · Assigned by mitre