Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:02 a.m.16 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS8.3AI score0.00685EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/25 2:15 p.m.18 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS7.8AI score0.00685EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/25 2:15 p.m.9 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/25 12:00 a.m.85 views

CVE-2024-28393

The e-commerce software Scalapay is affected by an SQL injection vulnerability in versions 1.2.41 and earlier . A remote attacker can exploit the ScalapayReturnModuleFrontController::postProcess() method to escalate privileges . As a temporary workaround, users are advised to disable the affected...

8.2AI score0.00685EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/25 12:00 a.m.11 views

Scalapay 安全漏洞

Scalapay is an e-commerce software from Scalapay Inc. A security vulnerability exists in Scalapay v.1.2.41 and earlier versions that stems from the presence of a SQL injection vulnerability. An attacker can exploit the vulnerability to escalate privileges via the...

9.8CVSS8AI score0.00685EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/25 12:00 a.m.16 views

PT-2024-22413 · Scalapay · Scalapay

Name of the Vulnerable Software and Affected Versions: Scalapay versions 1.2.41 and earlier Description: The issue allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method. This is a SQL injection vulnerability. Recommendations: For Scalapay...

9.8CVSS8.2AI score0.00685EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/03/25 12:00 a.m.16 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

8.2AI score0.00685EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/25 12:00 a.m.27 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

8.1AI score0.00685EPSS
SaveExploits0References2
Rows per page
Query Builder