CVE-2024-38788

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in B?i Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06.
Configurations

Configuration 1 (hide)

cpe:2.3:a:uipress:uipress_lite:*:*:*:*:*:wordpress:*:*

History

29 Jul 2024, 20:19

Type Values Removed Values Added
CPE cpe:2.3:a:uipress:uipress_lite:*:*:*:*:*:wordpress:*:*
Summary (en) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06. (en) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in B?i Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06.
CVSS v2 : unknown
v3 : 7.6
v2 : unknown
v3 : 7.2
First Time Uipress uipress Lite
Uipress
References () https://patchstack.com/database/vulnerability/uipress-lite/wordpress-uipress-lite-plugin-3-4-06-sql-injection-vulnerability?_s_id=cve - () https://patchstack.com/database/vulnerability/uipress-lite/wordpress-uipress-lite-plugin-3-4-06-sql-injection-vulnerability?_s_id=cve - Third Party Advisory

Information

Published : 2024-07-22 11:15

Updated : 2024-07-29 20:19


NVD link : CVE-2024-38788

Mitre link : CVE-2024-38788

CVE.ORG link : CVE-2024-38788


JSON object : View

Products Affected

uipress

  • uipress_lite
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')