CVE-2024-12895

CRITICO 9.8CVE-2024-12895 · Published 22/12/2024 · updated 17/06/2026

In breve

CVE-2024-12895 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda treasurehunt (treasurehuntgame).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 46.3% delle vulnerabilità.
Correzione: aggiornare a 2024-05-04 o successiva.

Package	Affected versions	Patched versions
treasurehunt treasurehuntgame	`< 2024-05-04`	`2024-05-04`

Description

A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function console_log of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql injection. The attack can be launched remotely. The identifier of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue.

References

TreasureHuntGame/TreasureHunt commit 8bcc649 · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di treasurehunt

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free