CVE-2024-8220 in Tailoring Management Systeminformation

Résumé

par MITRE • 28/08/2024

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file staffedit.php. The manipulation of the argument id/stafftype/address/fullname/phonenumber/salary leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

Responsable

VulDB

Divulgation

28/08/2024

Modérer

accepté

Entrée

VDB-275929

CPE

prêt

Exploitation

Télécharger

EPSS

0.00590

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!