Security Advisory

CVE-2024-37858

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-29 00:00:00

Last updated 2026-07-09 00:31:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.

← Browse all CVEs View on cve.org ↗