CVE-2024-44812
CVE-2024-44812
Vexday Risk Score
48Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 9.8EPSS 1.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
31 Aug 2024Public PoC
22 Oct 2024Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/b1u3st0rm/CVE-2024-44812-PoC★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.