Lucene search
HistoryApr 10, 2024 - 5:15 p.m.
CVE-2024-31356
cve-2024-31356
sql injection
solwin infotech
user activity log
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
EPSS
0
Percentile
9.0%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8.
Related
cvelist
cvelist
cve
cve
CVE-2024-31356
2024-04-10 17:15:55
vulnrichment
vulnrichment
wpvulndb
wpvulndb
User Activity Log < 2.0 - Admin+ SQL Injection
2024-04-11 00:00:00
wordfence
wordfence
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-31356