CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

CVE-2024-38293

CVE-2024-38293 affects ALCASAR prior to version 3.6.1. The vulnerability is in activity.php and enables cross-site request forgery (CSRF) and remote code execution (RCE). According to the available data, the CVSS 3.1 base score is 9.6 (CRITICAL) with network access, low attack complexity, no priv...