PT-2024-38993 · Abcd2 · Abcd2

Peritocibernetico · Published 2024-09-04 · Updated 2026-02-26 · CVE-2024-8411

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ABCD ABCD2 versions through 2.2.0-beta-1

Description A problematic issue exists in the processing of the /buscar integrada.php file. Manipulation of the Sub Expresion parameter can lead to cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed. The developer states that the script was completely redesigned after this version.

Recommendations Versions prior to 2.2.0-beta-1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2024-8411

Affected Products

Abcd2

References · 10

• 🔥 https://github.com/peritocibernetico/ABCD_Vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-8411 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8411 · Vendor Advisory
• https://vuldb.com/?submit.398843 · Note
• https://twitter.com/CVEnew/status/1831351323545219486 · Twitter Post
• https://t.me/cveNotify/153366 · Telegram Post
• https://vuldb.com/?id.276491 · Note
• https://t.me/cvedetector/4792 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1831375548431409495 · Twitter Post
• https://vuldb.com/?ctiid.276491 · Note