← volver
CVE-2024-6241

Pear Admin Boot getDictItems sql injection

CVSS 5.3 MEDIUMEPSS 0.5%CWE-89
A vulnerability was found in Pear Admin Boot up to 2.0.2 and classified as critical. This issue affects the function getDictItems of the file /system/dictData/getDictItems/. The manipulation with the input ,user(),1,1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269375.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
n/a · Pear Admin Boot

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →