3 matches found
CVE-2024-28395
SQL injection vulnerability in Best-Kit bestkitpopup v.1.7.2 and before allows a remote attacker to escalate privileges via the bestkitpopup.php component...
9.8CVSS7.8AI score0.00685EPSS
SaveExploits0References2
CVE-2024-28395
A SQL injection vulnerability exists in Best-Kit bestkit_popup version 1.7.2 and before . The flaw is located in the bestkit_popup.php component and allows a remote attacker to escalate privileges . To mitigate this risk, it is recommended to update to a version later than 1.7.2, although specifi...
9.8CVSS8.2AI score0.00685EPSS
SaveExploits0References2Affected Software1
20