Critical · 9.8 CVE-2024-50706 EUVD-2024-54227GHSA-77p2-mfp5-w993

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries o…

Published Mar 4, 2025 · Updated Apr 22, 2025 · Assigned by mitre

Description

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.

References

https://uniguest.com/cve-bulletins/
https://uniguest.com/wp-content/uploads/2025/02/CVE-2024-50706-Vulnerability-Summary.pdf