Lucene search

K
cvelistMitreCVELIST:CVE-2024-24015
HistoryFeb 06, 2024 - 12:00 a.m.

CVE-2024-24015

2024-02-0600:00:00
mitre
www.cve.org
sql injection
novel-plus
crafted parameters
/sys/user/exit
security vulnerability

0.001 Low

EPSS

Percentile

33.0%

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit

0.001 Low

EPSS

Percentile

33.0%

Related for CVELIST:CVE-2024-24015