Lucene search
+L

3 matches found

NVD
NVD
added 2024/02/20 10:15 p.m.13 views

CVE-2024-25428

SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter...

6.5CVSS7.9AI score0.00395EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/02/20 12:0 a.m.24 views

CVE-2024-25428

SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter...

8.2AI score0.00395EPSS
SaveExploits1References1
CVE
CVE
added 2024/02/20 12:0 a.m.8609 views

CVE-2024-25428

CVE-2024-25428 affects MRCMS v3.1.2 where the status parameter is vulnerable to SQL injection, enabling an attacker to run arbitrary system commands. Root cause: improper input handling leading to SQL injection. Impact per available data: potential command execution with network access, no user i...

6.5CVSS8.2AI score0.00395EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder