Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/02/13 11:41 p.m.•14 views

CVE-2024-35374

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution RCE under certain conditions...

9.8CVSS8.5AI score0.02767EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/24 8:29 p.m.•19 views

CVE-2024-35374

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution RCE under certain conditions...

8.9AI score0.02767EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/24 8:29 p.m.•49 views

CVE-2024-35374

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution RCE under certain conditions...

8.2AI score0.02767EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•1 views

CVE-2024-35374: Improper Neutralization of Special Elements used in a Command

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution RCE under certain conditions...

9.8CVSS6.8AI score0.02767EPSS
SaveExploits1References1
Rows per page
Query Builder