Vulnerabilities > CVE-2024-29871 - Unspecified vulnerability in Sapplica Sentrifugo 3.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |