Codezips Internal Marks Calculation 1.0 index.php tid SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Codezips Internal Marks Calculation 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, index.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument tid shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 09/20/2024. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2024-9037. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

5 Goyarwa · 87 Datenpunkte

FurɗeSúgá
09/20/2024 10:21		Gargadi 1/4
09/21/2024 15:58		Gargadi 2/4
09/27/2024 04:18		Gargadi 3/4
04/01/2025 05:18		Gargadi 4/4
08/28/2025 01:38
software_vendorCodezipsCodezipsCodezipsCodezipsCodezips
software_nameInternal Marks CalculationInternal Marks CalculationInternal Marks CalculationInternal Marks CalculationInternal Marks Calculation
software_version1.01.01.01.01.0
software_fileindex.phpindex.phpindex.phpindex.phpindex.php
software_argumenttidtidtidtidtid
vulnerability_cweCWE-89 (SQL Injection)CWE-89 (SQL Injection)CWE-89 (SQL Injection)CWE-89 (SQL Injection)CWE-89 (SQL Injection)
vulnerability_risk22222
cvss3_vuldb_avNNNNN
cvss3_vuldb_acLLLLL
cvss3_vuldb_prNNNNN
cvss3_vuldb_uiNNNNN
cvss3_vuldb_sUUUUU
cvss3_vuldb_cLLLLL
cvss3_vuldb_iLLLLL
cvss3_vuldb_aLLLLL
cvss3_vuldb_ePPPPP
cvss3_vuldb_rcRRRRR
advisory_urlhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.md
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.mdhttps://github.com/L1OudFd8cl09/CVE/blob/main/20_09_2024_a.md
source_cveCVE-2024-9037CVE-2024-9037CVE-2024-9037CVE-2024-9037CVE-2024-9037
cna_responsibleVulDBVulDBVulDBVulDBVulDB
cvss2_vuldb_avNNNNN
cvss2_vuldb_acLLLLL
cvss2_vuldb_auNNNNN
cvss2_vuldb_ciPPPPP
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiPPPPP
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcURURURURUR
cvss4_vuldb_avNNNNN
cvss4_vuldb_acLLLLL
cvss4_vuldb_prNNNNN
cvss4_vuldb_uiNNNNN
cvss4_vuldb_vcLLLLL
cvss4_vuldb_viLLLLL
cvss4_vuldb_vaLLLLL
cvss4_vuldb_ePPPPP
cvss2_vuldb_rlNDNDNDNDND
cvss3_vuldb_rlXXXXX
cvss4_vuldb_atNNNNN
cvss4_vuldb_scNNNNN
cvss4_vuldb_siNNNNN
cvss4_vuldb_saNNNNN
cvss2_vuldb_basescore7.57.57.57.57.5
cvss2_vuldb_tempscore6.46.46.46.46.4
cvss3_vuldb_basescore7.37.37.37.37.3
cvss3_vuldb_tempscore6.66.66.66.66.6
cvss3_meta_basescore7.37.37.37.37.3
cvss3_meta_tempscore6.66.96.96.96.9
cvss4_vuldb_bscore6.96.96.96.96.9
cvss4_vuldb_btscore5.55.55.55.55.5
advisory_date1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
cvss3_cna_avNNNN
cvss3_cna_acLLLL
cvss3_cna_prNNNN
cvss3_cna_uiNNNN
cvss3_cna_sUUUU
cvss3_cna_cLLLL
cvss3_cna_iLLLL
cvss3_cna_aLLLL
cvss3_cna_basescore7.37.37.37.3
cvss2_cna_avNNNN
cvss2_cna_acLLLL
cvss2_cna_auNNNN
cvss2_cna_ciPPPP
cvss2_cna_iiPPPP
cvss2_cna_aiPPPP
cvss2_cna_basescore7.57.57.57.5
cve_nvd_summaryesSe ha encontrado una vulnerabilidad clasificada como crítica en Codezips Internal Marks Calculation 1.0. Se ve afectada una función desconocida del archivo index.php. La manipulación del argumento tid provoca una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.Se ha encontrado una vulnerabilidad clasificada como crítica en Codezips Internal Marks Calculation 1.0. Se ve afectada una función desconocida del archivo index.php. La manipulación del argumento tid provoca una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.Se ha encontrado una vulnerabilidad clasificada como crítica en Codezips Internal Marks Calculation 1.0. Se ve afectada una función desconocida del archivo index.php. La manipulación del argumento tid provoca una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prNN
cvss4_cna_uiNN
cvss4_cna_vcLL
cvss4_cna_viLL
cvss4_cna_vaLL
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore6.96.9
euvd_idEUVD-2024-49682

◂ GurɗoGumtiGada ▸

Interested in the pricing of exploits?

See the underground prices here!