SourceCodeHero Clothes Recommendation System 1.0 Admin Login Page /admin/index.php t1 SQL Injection

CVSS Meta Temp IsilinganisoIntengo yamanje ye-exploit (≈)CTI Inzalo Score
7.9$0-$5k0.00

Isifinyezoulwazi

Kukhona ubuthakathaka obubizwa ngokuthi kubalulekile kakhulu obutholakele ku SourceCodeHero Clothes Recommendation System 1.0. Kuthinteka umsebenzi $software_function kufayela /admin/index.php kwe-component Admin Login Page. Ukusebenzisa kwepharamitha t1 kuholela ku SQL Injection. Lokhu buthakathaka kuthengiswa njenge CVE-2024-10336. Kuyenzeka ukuqala ukuhlasela kude. Ngaphezu kwalokho, kukhona i-exploit etholakalayo. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Iinkcukachaulwazi

Kukhona ubuthakathaka obubizwa ngokuthi kubalulekile kakhulu obutholakele ku SourceCodeHero Clothes Recommendation System 1.0. Kuthinteka umsebenzi $software_function kufayela /admin/index.php kwe-component Admin Login Page. Ukusebenzisa kwepharamitha t1 kuholela ku SQL Injection. Ukusebenzisa i-CWE ukukhomba inkinga kuholela ku-CWE-89. Ubuthakathaka babikwa.

Lokhu buthakathaka kuthengiswa njenge CVE-2024-10336. Kuyenzeka ukuqala ukuhlasela kude. Kukhona imininingwane yezobuchwepheshe etholakalayo. Udumo lwalobu buthakathi luphansi kunokujwayelekile. Ngaphezu kwalokho, kukhona i-exploit etholakalayo. Ukuhlaselwa sekudalulwe emphakathini futhi kungasetshenziswa. Okwamanje, intengo yamanje ye-exploit ingaba cishe USD $0-$5k ngalesi sikhathi.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Umkhiqizoulwazi

Umkhiqizi

Ibizo

Inguqulo

CPE 2.3ulwazi

CPE 2.2ulwazi

CVSSv4ulwazi

VulDB Umkhombandlela: 🔍
VulDB Ukuthembeka: 🔍

CNA CVSS-B Score: 🔍
CNA CVSS-BT Score: 🔍
CNA Umkhombandlela: 🔍

CVSSv3ulwazi

VulDB Ireyithingi yeMeta Base: 8.1
VulDB Meta Temp Isilinganiso: 7.9

VulDB Isilinganiso Esiyisisekelo: 7.3
VulDB Izinga Lesikhashana: 6.6
VulDB Umkhombandlela: 🔍
VulDB Ukuthembeka: 🔍

NVD Isilinganiso Esiyisisekelo: 9.8
NVD Umkhombandlela: 🔍

CNA Isilinganiso Esiyisisekelo: 7.3
CNA Umkhombandlela: 🔍

CVSSv2ulwazi

AVACAuCIA
💳💳💳💳💳💳
💳💳💳💳💳💳
💳💳💳💳💳💳
UmkhombandlelaUbunzimaUkufakazela ubuwenaUkuyimfihloUkuthembekaUkutholakala
vula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelela
vula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelela
vula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelela

VulDB Isilinganiso Esiyisisekelo: 🔍
VulDB Izinga Lesikhashana: 🔍
VulDB Ukuthembeka: 🔍

Ukusebenzisa ithuba lokungavikelekiulwazi

Ikilasi: SQL Injection
CWE: CWE-89 / CWE-74 / CWE-707
CAPEC: 🔍
ATT&CK: 🔍

Okubambekayo: Hayi
Wendawo: Hayi
Kude: Yebo

Ukutholakala: 🔍
Umnyango: Umphakathi
Isimo: Ubufakazi-bokusebenza
Google Hack: 🔍

EPSS Score: 🔍
EPSS Percentile: 🔍

Ukukhula kwentengo: 🔍
Okwamanje ukuhlolwa kwentengo: 🔍

0-Dayvula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelela
Namuhlavula ukufinyelelavula ukufinyelelavula ukufinyelelavula ukufinyelela

Ulwazi lwezingoziulwazi

Intshisekelo: 🔍
Abadlali abasebenzayo: 🔍
AmaQembu e-APT asebenzayo: 🔍

Izinyathelo zokuvikelaulwazi

Isincomo: akukho sithathwa esaziwayo
Isimo: 🔍

0-Suku Isikhathi: 🔍

Isikhathi somlandoulwazi

2024-10-24 🔍
2024-10-24 +0 Izinsuku 🔍
2024-10-28 +4 Izinsuku 🔍

Imithomboulwazi

Isimo: Akuchazwanga

CVE: CVE-2024-10336 (🔍)
GCVE (CVE): GCVE-0-2024-10336
GCVE (VulDB): GCVE-100-281681
scip Labs: https://www.scip.ch/en/?labs.20161013

Ukungenaulwazi

Kudalwa: 2024-10-24 12:53
Ukuvuselelwa: 2024-10-28 17:55
Ukulungiswa: 2024-10-24 12:53 (54), 2024-10-25 05:26 (30), 2024-10-28 17:55 (12)
Kugcwele: 🔍
Umthumeli: Delvy
Cache ID: 253:50F:103

Thumelaulwazi

Yamukelwa

  • Thumela #427442: SourceCodeHero Clothes Recommendation System - Admin Login Page V1.0 SQL Injection (kusuka ku Delvy)

Ingxoxo

Kuze kube manje akukabikho ukuphawula. Izilimi: nr + nd + en.

Ngiyacela ungene ngemvume ukuze ukwazi ukuphawula.

Do you know our Splunk app?

Download it now for free!