by Kastro
Paper/Archive/CVE-2024-5958

CVE-2024-5958

Eliz Software Panel — SQLi in Eliz Software's Panel

EPSS 0.5%CVSS 9.4
critical.is priorityof 100
37
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 43.1.431 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.

Affected

ProductAffectedFixed inSource
Panel< v2.3.24v2.3.24CNA
panel< 2.3.242.3.24CISA-ADP

Scores by source

TR-CERT (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-1497refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1497