Lucene search
INCIBECVELIST:CVE-2024-4466HistoryMay 03, 2024 - 11:44 a.m.
CVE-2024-4466 SQL injection vulnerability in Gescen
2024-05-0311:44:41
CWE-89
INCIBE
www.cve.org
cve-2024-4466
sql injection
gescen
centrosdigitales.net
database retrieval
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
SQL injection vulnerability in Gescen on the centrosdigitales.net platform. This vulnerability allows an attacker to send a specially crafted SQL query to the pass parameter and retrieve all the data stored in the database.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Gescen",
"vendor": "Centros Digitales",
"versions": [
{
"status": "affected",
"version": "2023 version"
}
]
}
]
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
Related for CVELIST:CVE-2024-4466