by Kastro
Paper/Archive/CVE-2024-7735

CVE-2024-7735

Exnet Informatics Software Ferry Reservation System — SQLi in Exnet Informatics Software's Ferry Reservation System

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
34
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 30.4.304 × 206.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002.

Affected

ProductAffectedFixed inSource
Ferry Reservation System< 240805-002240805-002CNA
ferry_reservation_system< 240805-002240805-002CISA-ADP

Scores by source

TR-CERT (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-1518refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1518