CVE-2024-6241

CRITICO 9.8CVE-2024-6241 · Published 21/06/2024 · updated 17/06/2026

In breve

CVE-2024-6241 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda pear admin boot (pearadmin).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.52%, superiore al 44.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pear admin boot pearadmin	`≤ 2.0.2`	No fix yet

Description

A vulnerability was found in Pear Admin Boot up to 2.0.2 and classified as critical. This issue affects the function getDictItems of the file /system/dictData/getDictItems/. The manipulation with the input ,user(),1,1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269375.

References

gitee.com/pear-admin/Pear-Admin-Boot/issues/IA5IPQ · Exploit
gitee.com/pear-admin/Pear-Admin-Boot/issues/IA5KBS · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di pear admin boot

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free