CVE-2024-29320

2024-04-3000:00:00

mitre

github.com

wallos

sql injection

vulnerability

subscriptions

AI Score

8.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ellite:wallos:-:*:*:*:*:*:*:*"
    ],
    "vendor": "ellite",
    "product": "wallos",
    "versions": [
      {
        "status": "affected",
        "version": "-",
        "versionType": "custom",
        "lessThanOrEqual": "1.15.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]