exploitDog

CVE-2024-32212

Опубликовано: 01 мая 2024

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.

Ссылки

https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
Exploit
Third Party Advisory
https://gainsec.com/2024/04/28/cve-2024-32210-cve-2024-32211-cve-2024-32212-cve-2024-32213-lomag-integrator-ce-warehouse-management/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:logint:lomag_warehouse_management:*:*:*:*:*:*:*:*

Версия до 1.0.20.120 (включая)

EPSS

Процентиль: 38%

0.00163

Низкий

8.1 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-28wv-5cj3-9qg6

CVSS3: 8.1

github

больше 1 года назад

SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.

EPSS

Процентиль: 38%

0.00163

Низкий

8.1 High

CVSS3

Дефекты

CWE-89