CVE-2024-45875 Information

Description

The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291) in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser is vulnerable to SQL injection. The JSON object username allows the manipulation of SQL queries.

Reference

https://cyber.wtf/2024/11/11/topqw-webportal-cves/