CVE-2024-34534

2024-05-0600:00:00

mitre

github.com

cybrosys techno solutions

sql injection

text commander

irmodel

privilege escalation

8.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.1 allows a remote attacker to gain privileges via the data parameter to models/ir_model.py:IrModel::chech_model.

References

github.com/luvsn/OdZoo/tree/main/exploits/text_commander