CVE-2024-30801

Summary

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://cloud.com
• http://www.minipacs.com/ylqxrj
• https://github.com/WarmBrew/web_vul/blob/main/Cloud%20based%20customer%20service/SQLi.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• http://www.minipacs.com/ylqxrj
• https://github.com/WarmBrew/web_vul/blob/main/Cloud%20based%20customer%20service/SQLi.md

• ←Previous
• Next→