CVE-2024-35374

Mocodo Mocodo Online version 4.2.6 and below is vulnerable to a critical security flaw due to improper sanitization of the sql_case input field in the /web/generate.php file. This vulnerability allows remote attackers to execute arbitrary SQL commands and potentially perform command injection, wh...

CVE-2024-35373

Mocodo Mocodo Online version 4.2.6 and below is vulnerable to Remote Code Execution (RCE) . The root cause is improper input validation at the /web/rewrite.php API endpoint, which allows an attacker to inject and execute arbitrary code. The vulnerability is classified under CWE-75 (Special Elemen...