SQL Injection in Streamsoft Prestiż

CVE-2024-11504

Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an authenticated remote attacker. This issue was fixed in 18.1.376.37 version of the softwa…

Vulnerability class: SQL Injection

EPSS: 0.005 (64.1th percentile) — read the EPSS interpretation.

Affected products

Streamsoft Prestiż — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cert.pl/en/posts/2025/03/CVE-2024-7407/ (third-party-advisory)
www.streamsoft.pl/streamsoft-prestiz/ (product)