CVE-2024-29320

概要

参考情報

• ellite/Wallos · Product
• ellite/Wallos release v1.15.3 · Release Notes
• injasec.com/open-source-software-oss/cve-2024-29320-sql-injection-in-wallos · Exploit

wallos のその他の脆弱性

• CVE-2026-33417高 7.1Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.2, password reset tokens in Wallos never expire.…
• CVE-2026-33407緊急 9.1Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, Wallos endpoints/logos/search.php accepts HTT…
• CVE-2026-33401中 6.5Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the patch introduced in commit e8a513591 (CVE…
• CVE-2026-33400中 5.4Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, a stored cross-site scripting (XSS) vulnerabi…
• CVE-2026-33399高 7.7Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the SSRF fix applied in version 4.6.2 for CVE…