CVE-2024-28145 is an SQL injection vulnerability in the /class/dbconnect.php file that allows an unauthenticated attacker to inject malicious SQL via HTTP GET parameters such as search, table, field, and value. The vulnerability enables attackers to manipulate database queries, potentially leading to data disclosure, modification, or denial of service.