VYPR
Critical severity9.8NVD Advisory· Published Mar 4, 2025· Updated Jun 17, 2026

CVE-2024-50706

CVE-2024-50706

Description

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.

Affected products

4
  • Uniguest/Tripleplaycpe-rescue4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:uniguest:tripleplay:*:*:*:*:*:*:*:*range: >=23.1,<24.1.2
    • cpe:2.3:a:uniguest:tripleplay:24.2:*:*:*:*:*:*:*
    • (no CPE)range: >=23.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.