CVE-2024-11020

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - twcert@cert.org.tw

Published

2024-11-11

Last modified

2024-11-11

Weaknesses

CWE-89

Affected products

• Webopac7 (Grand Vice Info)
• Webopac (Vice)

References

• https://www.twcert.org.tw/en/cp-139-8218-e238b-2.html
• https://www.twcert.org.tw/tw/cp-132-8217-05b42-1.html