Showing 1 vulnerability on this page for inventio-lite

Signals CISA KEV Ransomware Nuclei
evilnapsis vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Inventio Lite 4 - SQL Injection

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."

CWE-89Sep 11, 2024
CVSS9.8v3.1EPSS2.58%PoCs2SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX