Threats tagged 'ghsa-27h2-c33j-53m3'

A Blind SQL Injection vulnerability exists in Futurum Software’s management software due to insufficient validation and sanitization of user inputs in database queries and an incorrect Web Application Firewall (WAF) configuration. This flaw allows attackers to bypass protection mechanisms by sending manipulated HTTP requests. Exploitation could enable unauthenticated attackers to execute arbitrary SQL queries, extract the database structure, and access sensitive customer data including personally identifiable information (PII).