CVE-2024-44812-PoC

البائع SourceCodester رابط المنتج المتأثر https://www.sourcecodester.com/php/14717/online-complaint-site-using-phpmysqli-full-source-code.html معرف CVE: CVE-2024-44812 الوصف: ثغرة حقن SQL في موقع الشكاوى عبر الإنترنت الإصدار 1.0 تسمح لمهاجم عن بعد بتصعيد الصلاحيات عبر معاملات اسم المستخدم وكلمة...

CVE-2024-44812

SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component...

CVE-2024-44812: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component...

PT-2019-18519

Name of the Vulnerable Software and Affected Versions Artica Proxy version 3.06.200056 Description The issue allows remote attackers to execute arbitrary commands as root. This is achieved by reading the ldap admin and ldap password fields from the ressources/settings.inc file, using these...