Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:02 a.m.•18 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS8.3AI score0.00685EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/25 2:15 p.m.•20 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS7.8AI score0.00685EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/25 2:15 p.m.•13 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•18 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

8.2AI score0.00685EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/25 12:00 a.m.•21 views

PT-2024-22413

Name of the Vulnerable Software and Affected Versions Scalapay versions 1.2.41 and earlier Description The issue allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method. This is a SQL injection vulnerability. Recommendations For Scalapay...

9.8CVSS8.2AI score0.00685EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/03/25 12:00 a.m.•30 views

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

8.1AI score0.00685EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/25 12:00 a.m.•15 views

Scalapay 安全漏洞

Scalapay is an e-commerce software from Scalapay Inc. A security vulnerability exists in Scalapay v.1.2.41 and earlier versions that stems from the presence of a SQL injection vulnerability. An attacker can exploit the vulnerability to escalate privileges via the...

9.8CVSS8AI score0.00685EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/25 12:00 a.m.•88 views

CVE-2024-28393

The e-commerce software Scalapay (versions 1.2.41 and earlier ) is susceptible to a SQL injection vulnerability within the ScalapayReturnModuleFrontController::postProcess() method. A remote attacker can exploit this flaw to escalate privileges . As a temporary workaround, it is recommended to di...

9.8CVSS8.2AI score0.00685EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•3 views

CVE-2024-28393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...

9.8CVSS6AI score0.00685EPSS
SaveExploits0References2
Rows per page
Query Builder