Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-53544 EUVD-2025-4260GHSA-w24q-f26j-wfqj

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieN…

Published Feb 24, 2025 · Updated Feb 25, 2025 · Assigned by mitre

Description

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint.

References