Lucene search
Veracode Vulnerability DatabaseVERACODE:47216HistoryMay 28, 2024 - 7:50 a.m.
SQL Injection
2024-05-2807:50:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
sql injection
improper sanitization
remote attackers
arbitrary sql commands
command injection
remote code execution
mocodo is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution (RCE) under certain conditions.
Related
cve
cve
CVE-2024-35374
2024-05-24 21:15:59
osv
osv
Mocodo vulnerable to SQL injection in `/web/generate.php`
2024-05-28 20:20:37
github
github
Mocodo vulnerable to SQL injection in `/web/generate.php`
2024-05-28 20:20:37
cvelist
cvelist
CVE-2024-35374
1976-01-01 00:00:00
nvd
nvd
CVE-2024-35374
2024-05-24 21:15:59