CVE-2024-35374
May 24, 2024, 9:15 p.m.
Tags
Product(s) Impacted
Mocodo Online
- 4.2.6 and below
Description
Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution (RCE) under certain conditions.
Weaknesses
Date
Published: May 24, 2024, 9:15 p.m.
Last Modified: May 24, 2024, 9:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org