Description
SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail() method.
Critical · 9.8
CVE-2024-28389
EUVD-2024-25487GHSA-7rm7-qc42-px2v
SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensi…
Published Mar 19, 2024 · Updated Aug 2, 2024 · Assigned by mitre