CVE-2024-6733

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file templateedit.php. The manipulation of the argument id/title/msg leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271454 is the identifier assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:angeljudesuarez:tailoring_management_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 09:50

Type Values Removed Values Added
References () https://github.com/jiaoyanshuai/cve/issues/1 - Exploit () https://github.com/jiaoyanshuai/cve/issues/1 - Exploit
References () https://vuldb.com/?ctiid.271454 - Permissions Required () https://vuldb.com/?ctiid.271454 - Permissions Required
References () https://vuldb.com/?id.271454 - Third Party Advisory () https://vuldb.com/?id.271454 - Third Party Advisory
References () https://vuldb.com/?submit.374463 - Third Party Advisory () https://vuldb.com/?submit.374463 - Third Party Advisory
CVSS v2 : 6.5
v3 : 8.8
v2 : 6.5
v3 : 6.3

21 Aug 2024, 17:00

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue encontrada en itsourcecode Tailoring Management System 1.0 y clasificada como crítica. Una función desconocida del archivo templateedit.php es afectada por esta vulnerabilidad. La manipulación del argumento id/title/msg conduce a la inyección de SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-271454 es el identificador asignado a esta vulnerabilidad.
CPE cpe:2.3:a:angeljudesuarez:tailoring_management_system:1.0:*:*:*:*:*:*:*
CVSS v2 : 6.5
v3 : 6.3
v2 : 6.5
v3 : 8.8
First Time Angeljudesuarez tailoring Management System
Angeljudesuarez
References () https://github.com/jiaoyanshuai/cve/issues/1 - () https://github.com/jiaoyanshuai/cve/issues/1 - Exploit
References () https://vuldb.com/?ctiid.271454 - () https://vuldb.com/?ctiid.271454 - Permissions Required
References () https://vuldb.com/?id.271454 - () https://vuldb.com/?id.271454 - Third Party Advisory
References () https://vuldb.com/?submit.374463 - () https://vuldb.com/?submit.374463 - Third Party Advisory

14 Jul 2024, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-14 23:15

Updated : 2024-11-21 09:50


NVD link : CVE-2024-6733

Mitre link : CVE-2024-6733

CVE.ORG link : CVE-2024-6733


JSON object : View

Products Affected

angeljudesuarez

  • tailoring_management_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')