Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-7735

Sept. 26, 2024, 1:32 p.m.

Tags

CWE-89
iletisim@usom.gov.tr
2024-09-23
CVE-2024-7735

Product(s) Impacted

Exnet Informatics Software Ferry Reservation System

  • before 240805-002

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection.This issue affects Ferry Reservation System: before 240805-002.

Weaknesses

CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CWE ID: 89

Date

Published: Sept. 23, 2024, 12:15 p.m.

Last Modified: Sept. 26, 2024, 1:32 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

iletisim@usom.gov.tr

References

https://www.usom.gov.tr/ iletisim@usom.gov.tr