An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injection due to improper neutralization of special elements used in an SQL command.
References
Link | Resource |
---|---|
http://caterease.com | Product |
http://horizon.com | Product |
https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html | Third Party Advisory |
https://vuldb.com/?id.273373 | VDB Entry |
Configurations
History
10 Sep 2024, 16:38
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-89 | |
References | () http://caterease.com - Product | |
References | () http://horizon.com - Product | |
References | () https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html - Third Party Advisory | |
References | () https://vuldb.com/?id.273373 - VDB Entry | |
CPE | cpe:2.3:a:horizoncloud:caterease:*:*:*:*:*:*:*:* | |
First Time |
Horizoncloud
Horizoncloud caterease |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
08 Aug 2024, 15:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-78 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.6 |
07 Aug 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Aug 2024, 12:41
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
02 Aug 2024, 20:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-02 20:17
Updated : 2024-09-10 16:38
NVD link : CVE-2024-38889
Mitre link : CVE-2024-38889
CVE.ORG link : CVE-2024-38889
JSON object : View
Products Affected
horizoncloud
- caterease