CVE-2024-0477

Опубликовано: 13 янв. 2024

Источник: nvd

CVSS3: 6.3

CVSS3: 9.8

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/action/update-deworm.php. The manipulation of the argument usage_deworm leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250582 is the identifier assigned to this vulnerability.

Ссылки

https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL5.pdf
Broken Link
https://vuldb.com/?ctiid.250582
Permissions Required
Third Party Advisory
https://vuldb.com/?id.250582
Third Party Advisory
https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL5.pdf
Broken Link
https://vuldb.com/?ctiid.250582
Permissions Required
Third Party Advisory
https://vuldb.com/?id.250582
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:code-projects:fighting_cock_information_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00052

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-wr53-cc8j-wv27

CVSS3: 6.3

github

около 2 лет назад

EPSS

Процентиль: 16%

0.00052

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89