CVE-2024-2588 — SQL injection vulnerability in AMSS++
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send…
Published: 2024-03-18 · CVSS: 8.2 · CVSS 3.1
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7