CVE-2024-35374

CVE-2024-35374 affects Mocodo Online 4.2.6 and earlier, where the sql_case input field in /web/generate.php is not sanitized properly. This allows remote attackers to execute arbitrary commands, potentially leading to remote code execution (RCE) under certain conditions. Exploitation and impact a...

CVE-2024-35373

CVE-2024-35373 affects Mocodo Mocodo Online 4.2.6 and earlier. The vulnerability is a Remote Code Execution flaw exploitable via the /web/rewrite.php endpoint, attributed to improper input handling/validation per sources in the connected documents. CVSSv3.1 base score is 9.8 (CRITICAL) with netwo...