Lucene search
+L

6 matches found

NVD
NVD
•added 2024/04/13 12:15 p.m.•25 views

CVE-2024-3720

A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vulnerability affects unknown code of the file /mfsNotice/page of the component API Interface. The manipulation of the argument gsdwid leads to sql injection. The attack can be...

6.5CVSS6.9AI score0.00456EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/13 11:31 a.m.•37 views

CVE-2024-3720 Tianwell Fire Intelligent Command Platform API Interface page sql injection

A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vulnerability affects unknown code of the file /mfsNotice/page of the component API Interface. The manipulation of the argument gsdwid leads to sql injection. The attack can be...

6.5CVSS7.2AI score0.00456EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/13 11:31 a.m.•105 views

CVE-2024-3720

The CVE-2024-3720 entry details a SQL injection in Tianwell Fire Intelligent Command Platform (version 1.1.1.1) affecting the API Interface component via the /mfsNotice/page path. The root cause is manipulation of the gsdwid parameter, enabling remote exploitation and data exposure/impact as desc...

6.5CVSS6.3AI score0.00456EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/13 11:31 a.m.•21 views

CVE-2024-3720 Tianwell Fire Intelligent Command Platform API Interface page sql injection

A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vulnerability affects unknown code of the file /mfsNotice/page of the component API Interface. The manipulation of the argument gsdwid leads to sql injection. The attack can be...

6.5CVSS6.3AI score0.00456EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/13 12:00 a.m.•8 views

CVE-2024-3720: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vulnerability affects unknown code of the file /mfsNotice/page of the component API Interface. The manipulation of the argument gsdwid leads to sql injection. The attack can be...

6.5CVSS6.3AI score0.00456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/13 12:00 a.m.•9 views

PT-2024-27368

Name of the Vulnerable Software and Affected Versions Tianwell Fire Intelligent Command Platform version 1.1.1.1 Description A critical issue has been found in the Tianwell Fire Intelligent Command Platform. This issue affects the API Interface component, specifically the /mfsNotice/page file. Th...

6.5CVSS6.3AI score0.00456EPSS
SaveExploits0References7
Rows per page
Query Builder