Lucene search
+L

3 matches found

NVD
NVD
added 2024/03/18 2:15 p.m.25 views

CVE-2024-2585

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/selectsend2.php, in the 'sdindex' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...

8.2CVSS8.3AI score0.00523EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/18 2:15 p.m.10 views

CVE-2024-2585

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/selectsend2.php, in the 'sdindex' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...

7.5CVSS5.9AI score0.00523EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/18 1:52 p.m.60 views

CVE-2024-2585

CVE-2024-2585 affects AMSS++ v4.31. The vulnerability is an SQL injection via the sd_index parameter in /amssplus/modules/book/main/select_send_2.php, allowing a remote attacker to craft queries and potentially retrieve all data from the database. Public documents consistently describe this as a ...

8.2CVSS8.3AI score0.00523EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder