PT-2024-36635 · Unknown · Richteam Share Buttons – Social Media

Lvt-Tholv2K

·

Published

2024-12-16

·

Updated

2024-12-16

·

CVE-2024-55982

CVSS v3.1

9.3

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions richteam Share Buttons – Social Media versions n/a through 1.0.2
Description The issue is related to the improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This means an attacker can inject malicious SQL code without directly seeing the database output, potentially leading to unauthorized data access or modification. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.
Recommendations For versions n/a through 1.0.2, upgrade to a newer version to resolve the issue. As a temporary workaround, consider restricting access to sensitive database elements until a patch is available. Avoid using user-input data directly in SQL commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-55982

Affected Products

Richteam Share Buttons – Social Media