Exploit for SQL Injection in Securenvoy Multi-Factor Authentication Solutions CVE-2024-37393

Name: Exploit for SQL Injection in Securenvoy Multi-Factor Authentication Solutions CVE-2024-37393
Rating: 5 (279 reviews)

2024-06-10 | CVSS 7.5

## https://sploitus.com/exploit?id=CF782FB0-516E-5900-8019-E216E113A363
# securenvoy-cve-2024-37393

*RESPONSIBLE DISCLOSURE*

Vulnerability check script for CVE-2024-37393 (SecurEnvoy MFA 9.4.513).

Proof of concept code for checking LDAP injection.

![POC](img/POC.png)

# Fix

Vulnerability fixed in SecurEnvoy MFA >= 9.4.514.

# Links

[https://www.optistream.io/blogs/tech/securenvoy-cve-2024-37393](https://www.optistream.io/blogs/tech/securenvoy-cve-2024-37393)

# Author

[https://optistream.io](https://optistream.io)