CVE-2024-7452

NVD Published Date: August 04, 2024 at 04:17 AM

NVD Last Modified: August 09, 2024 at 03:33 PM

Download Patch

Vulnerability ID

CVE-2024-7452

Severity

CRITICAL

Severity Score

9.8

Summary

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_company.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273543.

References

https://vuldb.com/?id.273543

https://vuldb.com/?ctiid.273543

https://vuldb.com/?submit.383865

https://github.com/DeepMountains/Mirage/blob/main/CVE11-4.md

Mitigation and Patches

Exploits

https://github.com/DeepMountains/Mirage/blob/main/CVE11-4.md

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-89

Recent Publish

CVE-2024-7453

CVE-2024-7454

CVE-2024-7455

CVE-2024-35143

Security Update for SQL Server 2016 Service Pack 3 CU (KB5040944)

Security Update for SQL Server 2016 Service Pack 3 GDR (KB5040946)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7452

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7452

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action