CVE-2024-35374

May 24, 2024, 9:15 p.m.

Product(s) Impacted

Mocodo Online

  • 4.2.6 and below

Description

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution (RCE) under certain conditions.

Weaknesses

Date

Published: May 24, 2024, 9:15 p.m.

Last Modified: May 24, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References