Lucene search

K

[email protected]CVE-2024-29320

HistoryApr 30, 2024 - 4:15 p.m.

CVE-2024-29320

2024-04-3016:15:07

[email protected]

web.nvd.nist.gov

27

wallos 1.15.3

sql injection

/subscriptions/get.php

vulnerability

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.

References

github.com/ellite/Wallos

github.com/ellite/Wallos/releases/tag/v1.15.3

injasec.com/open-source-software-oss/cve-2024-29320-sql-injection-in-wallos/

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

Related for CVE-2024-29320