CVE-2024-8331

NVD Published Date: August 30, 2024 at 11:15 AM

NVD Last Modified: September 03, 2024 at 02:25 PM

Download Patch

Vulnerability ID

CVE-2024-8331

Severity

CRITICAL

Severity Score

9.8

Summary

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References

https://vuldb.com/?id.276207

https://vuldb.com/?ctiid.276207

https://vuldb.com/?submit.398769

https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection1/rapidcms%20user-move-run.php%20SQL%20injection.md

Mitigation and Patches

Exploits

https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection1/rapidcms%20user-move-run.php%20SQL%20injection.md

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-89

Recent Publish

CVE-2022-48944

CVE-2024-8332

CVE-2024-8335

CVE-2024-8260

CVE-2024-8334

2024-02 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5034763)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-8331

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-8331

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action