CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.

CVSS

No CVSS.

References

Link	Resource
https://github.com/torchstar/autoexpress/blob/master/buginfodetail.md

Configurations

No configuration.

History

22 Apr 2024, 13:28

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de inyección SQL en autoexpress v.1.3.0 permite a los atacantes ejecutar comandos SQL arbitrarios a través del parámetro carId.

19 Apr 2024, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-19 21:15

Updated : 2024-04-22 13:28

NVD link : CVE-2024-30974

Mitre link : CVE-2024-30974

CVE.ORG link : CVE-2024-30974

JSON object : View

Products Affected

No product.

CWE

No CWE.