CVE-2024-29435

An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...

CVE-2024-29433

A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...

CVE-2024-29435: Improper Neutralization of Special Elements used in a Command

An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...

PT-2024-22895 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: An issue in Alldata allows an attacker to run arbitrary commands via the processId parameter. Recommendations: For Alldata version 0.4.6, avoid using the processId parameter until a fix is available. As a...

CVE-2024-29435

An issue in Alldata v0.4.6 allows an attacker to execute arbitrary commands via the processId parameter. This vulnerability stems from the improper neutralization of special elements used in a command. As a workaround, it is recommended to avoid using the processId parameter until a fix is availa...

CVE-2024-29433

A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...

alldata.com XSS vulnerability

Vulnerable URL: http://www.alldata.com/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 77723 VIP website status:| No...