PT-2024-16709 · Grand Vice Info · Webopac

Ming-Hung + 3 · Published 2024-11-11 · Updated 2024-11-18 · CVE-2024-11020

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webopac from Grand Vice info (affected versions not specified)

Description The Webopac system has a SQL Injection flaw, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-11020

Affected Products

Webopac

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2024-11020 · Security Note
• https://osv.dev/vulnerability/CVE-2024-11020 · Vendor Advisory
• https://twcert.org.tw/en/cp-139-8218-e238b-2.html · Note
• https://t.me/cvedetector/10489 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1855935759666368662 · Twitter Post
• https://t.me/cvenotify/102030 · Telegram Post
• https://twitter.com/CVEnew/status/1855876283223384403 · Twitter Post
• https://twcert.org.tw/tw/cp-132-8217-05b42-1.html · Note
• https://twitter.com/CveFindCom/status/1855875889843556357 · Twitter Post
• https://twitter.com/transilienceai/status/1857478263200952619 · Twitter Post
• https://twitter.com/transilienceai/status/1857478269546934686 · Twitter Post
• https://t.me/cvenotify/101273 · Telegram Post
• https://t.me/latest_high_impact_cve/1497 · Telegram Post
• https://twitter.com/transilienceai/status/1857478284474490934 · Twitter Post
• https://twitter.com/transilienceai/status/1857478301956350367 · Twitter Post