itsourcecode Tailoring Management System 1.0 orderadd.php Kunde SQL Injection

Gaskiya vulnerability da aka ware a matsayin kura an samu a itsourcecode Tailoring Management System 1.0. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil orderadd.php, a cikin sashen $software_component. A sa manipulation of the argument Kunde ka SQL Injection. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-89. Hakika, rauni an bayyana shi 06/20/2024. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2024-6195. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal faɗi ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga github.com. 0-day shima, an ndiyam a wuro be $0-$5k. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

1 Goyarwa · 55 Datenpunkte

FurɗeSúgá
06/20/2024 08:11
software_vendoritsourcecode
software_nameTailoring Management System
software_version1.0
software_fileorderadd.php
software_argumentcustomer
vulnerability_cweCWE-89 (SQL Injection)
vulnerability_risk2
cvss3_vuldb_avN
cvss3_vuldb_acL
cvss3_vuldb_uiN
cvss3_vuldb_sU
cvss3_vuldb_cL
cvss3_vuldb_iL
cvss3_vuldb_aL
cvss3_vuldb_eP
cvss3_vuldb_rcR
advisory_urlhttps://github.com/2768210355/cve/issues/2
exploit_availability1
exploit_publicity1
exploit_urlhttps://github.com/2768210355/cve/issues/2
source_cveCVE-2024-6195
cna_responsibleVulDB
cvss2_vuldb_avN
cvss2_vuldb_acL
cvss2_vuldb_ciP
cvss2_vuldb_iiP
cvss2_vuldb_aiP
cvss2_vuldb_ePOC
cvss2_vuldb_rcUR
cvss4_vuldb_avN
cvss4_vuldb_acL
cvss4_vuldb_uiN
cvss4_vuldb_vcL
cvss4_vuldb_viL
cvss4_vuldb_vaL
cvss4_vuldb_eP
cvss2_vuldb_auS
cvss2_vuldb_rlND
cvss3_vuldb_prL
cvss3_vuldb_rlX
cvss4_vuldb_atN
cvss4_vuldb_prL
cvss4_vuldb_scN
cvss4_vuldb_siN
cvss4_vuldb_saN
cvss2_vuldb_basescore6.5
cvss2_vuldb_tempscore5.6
cvss3_vuldb_basescore6.3
cvss3_vuldb_tempscore5.7
cvss3_meta_basescore6.3
cvss3_meta_tempscore5.7
cvss4_vuldb_bscore5.3
cvss4_vuldb_btscore2.1
advisory_date1718834400 (06/20/2024)
price_0day$0-$5k

Do you want to use VulDB in your project?

Use the official API to access entries easily!