critical9.8
CVE-2024-9921
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL comman…
Impact
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teamplus | Team\+ Pro | from 13.5.0 before 14.0.0 |