Lucene search
Veracode Vulnerability DatabaseVERACODE:47214HistoryMay 28, 2024 - 7:08 a.m.
Remote Code Execution (RCE)
2024-05-2807:08:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
remote code execution
improper input validation
attacker injection
arbitrary code
web vulnerability
mocodo software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
mocodo is vulnerable to Remote Code Execution. The vulnerability is due to improper input validation at /web/rewrite.php, which allows an attacker to inject and execute arbitrary code.
Related
nvd
nvd
CVE-2024-35373
2024-05-24 21:15:59
cvelist
cvelist
CVE-2024-35373
1976-01-01 00:00:00
cve
cve
CVE-2024-35373
2024-05-24 21:15:59
vulnrichment
vulnrichment
CVE-2024-35373
1976-01-01 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
Related for VERACODE:47214