Lucene search
HistoryMay 06, 2024 - 9:15 p.m.
CVE-2024-34534
cybrosys techno solutions
sql injection
remote attacker
privileges
irmodel
ir_model.
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7.7
Confidence
Low
EPSS
0
Percentile
9.0%
A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.1 allows a remote attacker to gain privileges via the data parameter to models/ir_model.py:IrModel::chech_model.
Related
cve
cve
CVE-2024-34534
2024-05-06 21:15:48
vulnrichment
vulnrichment
CVE-2024-34534
2024-05-06 00:00:00
cvelist
cvelist
CVE-2024-34534
2024-05-06 00:00:00
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7.7
Confidence
Low
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-34534