CVE-2024-0301

CRÍTICO 9.8CVE-2024-0301 · Published 08/01/2024 · updated 17/06/2026

En resumen

CVE-2024-0301 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a iparking (fhs-opensource).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.71%, mayor que el 53.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
iparking fhs-opensource	`= 1.5.22`	No fix yet

Description

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249868.

References

laoquanshi/heishou · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Más vulnerabilidades de iparking

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free