Vulnerability CVE-2024-37858
Published: 2024-07-29

Description:
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.

 References:
https://www.sourcecodester.com/
http://lost.com
https://packetstormsecurity.com/files/179079/Lost-And-Found-Information-System-1.0-SQL-Injection.html
Copyright 2026, cxsecurity.com

 

Back to Top