Lucene search
+L

4 matches found

NVD
NVD
•added 2024/03/23 11:15 p.m.•68 views

CVE-2024-24725

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/importrun.php&type=externalAssessment&step=4 URI...

8.8CVSS6.2AI score0.5132EPSS
SaveExploits7References2
OSV
OSV
•added 2024/03/23 12:00 a.m.•16 views

CVE-2024-24725

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/importrun.php&type=externalAssessment&step=4 URI...

8.8CVSS6.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/23 12:00 a.m.•0 views

CVE-2024-24725: Deserialization of Untrusted Data

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/importrun.php&type=externalAssessment&step=4 URI...

8.8CVSS5.8AI score0.5132EPSS
SaveExploits7References2
CNNVD
CNNVD
•added 2024/03/23 12:00 a.m.•49 views

Gibbon 安全漏洞

Gibbon is a school platform that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version 26.0.00 and earlier that stems from a vulnerability that allows an attacker to conduct a PHP via columnOrder in a POST request to...

8.8CVSS8.5AI score0.5132EPSS
SaveExploits7References3
Rows per page
Query Builder