CVE-2024-8522

🗓️ 12 Sep 2024 10:08:54Reported by CirclType

circl

circl🔗 cve.circl.lu👁 14 Views

CVE-2024-8522 records were sourced from various platforms and dates, indicating cyber threats.

Reporter	Title	Published	Views	Family All 20
0day.today	WordPress LMS 4.2.7 SQL Injection Vulnerability	23 Sep 202400:00	–	zdt
GithubExploit	Exploit for SQL Injection in Thimpress Learnpress	19 Sep 202407:04	–	githubexploit
BDU FSTEC	The vulnerability of the ‘c_only_fields’ parameter in the REST API endpoint /wp-json/learnpress/v1/courses of the LearnPress plugin for the WordPress content management system allows a hacker to execute arbitrary SQL code.	18 Feb 202500:00	–	bdu_fstec
CNNVD	WordPress plugin LearnPress SQL注入漏洞	12 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8522	12 Sep 202408:30	–	cve
Cvelist	CVE-2024-8522 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'	12 Sep 202408:30	–	cvelist
Exploit DB	LearnPress WordPress LMS Plugin 4.2.7 - SQL Injection	11 Apr 202500:00	–	exploitdb
Metasploit	WordPress LearnPress Unauthenticated SQLi (CVE-2024-8522, CVE-2024-8529)	17 Oct 202418:54	–	metasploit
Nuclei	LearnPress < 4.2.7.1 - SQL Injection	8 Jun 202604:09	–	nuclei
NVD	CVE-2024-8522	12 Sep 202409:15	–	nvd

Source	Link
bsky	www.bsky.app/profile/beikokucyber.bsky.social/post/3lmngl425df2e
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_learnpress_c_fields_sqli.rb
t	www.t.me/CNArsenal/3207
t	www.t.me/CyberBulletin/25500
t	www.t.me/CyberBulletin/630
t	www.t.me/CyberBulletin/662
t	www.t.me/CyberDilara/873
t	www.t.me/CyberSecurityTechnologies/11175
t	www.t.me/DarkWebInformer_CVEAlerts/3892
t	www.t.me/HackerArsenal/422

12 Sep 2024 10:08Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5 - 10

EPSS0.8713

SSVC

cve 2024 8522 cyber threats misp sources creation timestamps security records