Lucene search
PRIOn knowledge basePRION:CVE-2024-22108HistoryFeb 02, 2024 - 4:15 p.m.
Sql injection
2024-02-0216:15:00
PRIOn knowledge base
www.prio-n.com
5
gtb central console
sql injection
unauthenticated
password modification
security vulnerability
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gtb_central_console | eq | 15.17.1-30814.ng |
Related
cvelist
cvelist
CVE-2024-22108
2024-02-02 00:00:00
nvd
nvd
CVE-2024-22108
2024-02-02 16:15:55
cve
cve
CVE-2024-22108
2024-02-02 16:15:55