← voltar
CVE-2024-57459

CVE-2024-57459

CVSS 7.3 HIGHEPSS 0.2%CWE-89
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://gist.github.com/b0mk35h/921cfa00f9ea1af66645574537d38587https://owasp.org/www-community/attacks/SQL_Injection