CVE-2024-12785: fallo de gravedad media en itsourcecode Vehicle Management System
itsourcecode Vehicle Management System sendmail.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.5%
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
itsourcecode · Vehicle Management SystemCVEs relacionadas — itsourcecode Vehicle Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-6218MEDIUMitsourcecode Vehicle Management System busprofile.php sql injectionEPSS 0.7%CVE-2024-12784MEDIUMitsourcecode Vehicle Management System editbill.php sql injectionEPSS 0.6%CVE-2024-7794MEDIUMitsourcecode Vehicle Management System mybill.php sql injectionEPSS 0.5%CVE-2024-6193MEDIUMitsourcecode Vehicle Management System driverprofile.php sql injectionEPSS 0.5%CVE-2024-12783MEDIUMitsourcecode Vehicle Management System billaction.php cross site scriptingEPSS 0.4%CVE-2026-2867MEDIUMitsourcecode Vehicle Management System billaction.php sql injectionEPSS 0.4%