cve/2024/CVE-2024-13151.md
2025-09-29 21:09:30 +02:00

1.1 KiB

CVE-2024-13151

Description

Authorization Bypass Through User-Controlled SQL Primary Key, CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Logo Software Diva allows SQL Injection, CAPEC - 7 - Blind SQL Injection.This issue affects Diva: through 4.56.00.00.

POC

Reference

No PoCs from references.

Github