CVE-2024-42679

2024-08-1500:00:00

mitre

github.com

sql injection

super easy enterprise management system

arbitrary code execution

ajax component

AI Score

8.4

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted script to the/ajax/Login.ashx component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:berriai:litellm:*:*:*:*:*:*:*:*"
    ],
    "vendor": "berriai",
    "product": "litellm",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]