Lucene search
HistoryMar 12, 2024 - 9:15 p.m.
CVE-2024-24092
sql injection
code-projects.org
scholars tracking system
arbitrary code
login.php
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
EPSS
0
Percentile
9.0%
SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.
Related
vulnrichment
vulnrichment
CVE-2024-24092
2024-03-12 00:00:00
cnvd
cnvd
Scholars Tracking System SQL Injection Vulnerability (CNVD-2024-14043)
2024-03-14 00:00:00
cve
cve
CVE-2024-24092
2024-03-12 21:15:58
cvelist
cvelist
CVE-2024-24092
2024-03-12 00:00:00
prion
prion
Sql injection
2024-03-12 21:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-24092