CVE-2024-9460
CVE-2024-9460
Título es
CVE-2024-9460
Jue, 03/10/2024 – 15:15
Tipo
CWE-89
Gravedad v2.0
7.50
Gravedad 2.0 Txt
HIGH
Título en
CVE-2024-9460
Descripción en
A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
03/10/2024
03/10/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vector CVSS:2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
Gravedad 3.1 (CVSS 3.1 Base Score)
7.30
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
HIGH
Referencias
Enviar en el boletín
Off
