CVE-2024-0526

🗓️ 15 Jan 2024 00:00:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Critical SQL injection vulnerability in CXBSoft Url-shortening component (up to version 1.3.1) allows remote attackers to manipulate short URLs via HTTP POST Request Handler, leading to potential data compromise.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-0526	15 Jan 202401:26	–	circl
CNNVD	CXBSoft Url-shorting SQL Injection Vulnerability	14 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-0526 CXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection	15 Jan 202400:00	–	cvelist
EUVD	EUVD-2024-16319	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0526	15 Jan 202400:15	–	nvd
OSV	CVE-2024-0526	15 Jan 202400:15	–	osv
Prion	Sql injection	15 Jan 202400:15	–	prion
Positive Technologies	PT-2024-15639 · Unknown · Cxbsoft Url-Shorting	15 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-0526	23 May 202507:26	–	redhatcve
Vulnrichment	CVE-2024-0526 CXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection	15 Jan 202400:00	–	vulnrichment

NVD

Vulners

Node

cxbsoft url-shortingRange≤1.3.1

[
  {
    "vendor": "CXBSoft",
    "product": "Url-shorting",
    "versions": [
      {
        "version": "1.3.0",
        "status": "affected"
      },
      {
        "version": "1.3.1",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
note	www.note.zhaoj.in/share/Zezf8fmoq7lk

Parameter	Position	Path	Description	CWE
shorturl	request body	/pages/short_to_long.php	SQL injection in POST parameter shorturl	CWE-89

17 Jun 2026 06:53Current

9.7High risk

Vulners AI Score9.7

CVSS 3.15.5 - 9.8

CVSS 25.2

CVSS 35.5

EPSS0.00607

SSVC

CWE-89