← Back to browse · API

CVE-2024-44541

Severity

CRITICAL

CVSS

9.8

EPSS

0.02576

Risk score

40.1

CISA KEV

No

PoC

No

Published

2024-09-11

Modified

2024-09-11

First seen

2026-08-07

Aliases

EUVD-2024-41040, GHSA-6V8J-8Q3J-35HH

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-41040

Description

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."

References