CVE-2024-33444

2024-04-2900:00:00

mitre

www.cve.org

cve-2024-33444

sql injection

onethink v.1.1

privilege escalation

crafted script

modelmodel.class.php

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.

References

gist.github.com/LioTree/1971a489dd5ff619b89e7a9e1da91152

github.com/liu21st/onethink

github.com/liu21st/onethink/issues/39