Threats tagged 'ghsa-pr2c-m553-hpcv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.4	CVE-2024-50584An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the Medium4.42024-12-12GCVE DatabaseCVE-2024-50584 CVE-2024-50584 is a medium severity SQL injection vulnerability affecting a component that processes the /class/template_io.php endpoint. An authenticated attacker with the 'Poweruser' role can exploit this by supplying malicious GET parameters, specifically targeting the 'templates' parameter, which is vulnerable to blind boolean-based SQL injection. This allows injection of SQL syntax within the JSON structure of the parameter. Report on CVE-2024-50584 Vulnerability CWE-89 #ghsa-pr2c-m553-hpcv	GCVE Database	2024-12-12

Page 1 of 1