CVE-2024-0733 | Smsot up to 2.12 HTTP POST Request /api.php data[sign] sql injection

A vulnerability was found in Smsot up to 2.12. It has been classified as critical. Affected is an unknown function of the file /api.php of the component HTTP POST Request Handler. The manipulation of the argument data[sign] leads to sql injection.

This vulnerability is traded as CVE-2024-0733. It is possible to launch the attack remotely. Furthermore, there is an exploit available.