CVE-2024-44542

CVE-2024-44542 설명: todesk v1.1에서 /todesk.com/news.html의 title 파라미터를 통해 SQL 인젝션 취약점이 발견되었습니다. 취약점 유형: SQL 인젝션 제품 공급업체: todesk 영향받는 제품 버전: todesk - v1.1 영향받는 구성 요소: todesk.com, news.html 공격 유형: 원격 영향 정보 노출: 예 공격 벡터: 공격자는 특정 URL 요청을 구성하여 SQL 인젝션 취약점을 악용할 수 있습니다. 예를 들어:...

CVE-2024-44542

SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter...

CVE-2024-44542

SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter...

CVE-2024-44542

SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter...

CVE-2024-44542: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter...

CVE-2024-44542

The todesk remote desktop software (version v.1.1 ) contains a critical SQL Injection vulnerability in the 철todesk.com/news.html API endpoint. Specifically, the title parameter is susceptible to improper neutralization of special elements used in SQL commands. A remote attacker can exploit this b...

PT-2024-31170

Name of the Vulnerable Software and Affected Versions todesk version 1.1 Description The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/todesk.com/news.html" API endpoint, where a parameter is vulnerable to SQL injection. No information is provided about the...