Vulnerability CVE-2024-44541
Published: 2024-09-11

Description:
evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Inventio Lite 4 SQL Injection
pointedsec
01.05.2025

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://github.com/evilnapsis/inventio-lite
https://github.com/pointedsec/CVE-2024-44541/
Copyright 2025, cxsecurity.com

 

Back to Top