High · 7.5 CVE-2024-24312 EUVD-2024-21734GHSA-wwgc-f5xv-4vvc

SQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Mode…

Published May 1, 2024 · Updated Aug 1, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component.

References

https://www2.deloitte.com/xe/en/pages/about-deloitte/articles/sustainable-strategies/unveiling-vulnerabilities-in-cybersecurity.html