Lucene search
+L

7 matches found

NVD
NVD
•added 2024/04/29 5:15 p.m.•78 views

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

9.8CVSS7.7AI score0.00899EPSS
SaveExploits1References3
CVE
CVE
•added 2024/04/29 12:00 a.m.•85 views

CVE-2024-33444

A SQL injection vulnerability exists in the onethink content management framework, specifically in version v.1.1 . A remote attacker can exploit this by using a crafted script to target the ModelModel.class.php component, leading to an elevation of privilege . To mitigate risk, it is recommended ...

8.1AI score0.00899EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•1 views

CVE-2024-33444: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

9.8CVSS6AI score0.00899EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/29 12:00 a.m.•16 views

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

9.8CVSS8.1AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•14 views

OneThink 安全漏洞

OneThink is an open source content management framework. A security vulnerability exists in OneThink version v.1.1, which stems from an elevation of privilege vulnerability in the ModelModel.class.php component...

9.8CVSS7.1AI score0.00899EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•21 views

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

8.1AI score0.00899EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•38 views

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

8AI score0.00899EPSS
SaveExploits1References3
Rows per page
Query Builder