AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jul 2024, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html - Third Party Advisory | |
| First Time |
Space Management System Project space Management System
Space Management System Project |
|
| Summary |
|
|
| CPE | cpe:2.3:a:space_management_system_project:space_management_system:*:*:*:*:*:*:*:* cpe:2.3:a:space_management_system_project:space_management_system:2024-04-09-3302:*:*:*:*:*:*:* |
15 Jul 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-15 07:15
Updated : 2024-07-16 18:07
NVD link : CVE-2024-6743
Mitre link : CVE-2024-6743
CVE.ORG link : CVE-2024-6743
JSON object : View
Products Affected
space_management_system_project
- space_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')