PT-2024-5669 · Unknown · Netcat Cms

Published 2024-07-16 · Updated 2024-07-16

Positive Technologies · (AI Summary)

CVSS v2.0

9.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netcat CMS (affected versions not specified)

Description The issue is related to the implementation of the get component fields method in the comments module of the Netcat CMS system, which fails to take measures to protect the SQL query structure. This can allow a remote attacker to gain unauthorized access to protected information from the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2024-06382

Affected Products

Netcat Cms

References · 2

• https://bdu.fstec.ru/vul/2024-06382 · Security Note
• https://netcat.ru/democentre · Note