Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2024-36840
HistoryJun 12, 2024 - 3:15 p.m.

CVE-2024-36840

2024-06-1215:15:52
CWE-89
mitre
web.nvd.nist.gov
25
sql injection
boelter blue
remote attack

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.3

Confidence

High

EPSS

0

Percentile

10.3%

JSON

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to news_details.php and location_details.php; and the section parameter to services.php.

Related

vulnrichment 1
cvelist 1
exploitdb 1
nvd 1
zdt 1
packetstorm 1
vulnrichment
vulnrichment
CVE-2024-36840
2024-06-12 00:00:00
cvelist
cvelist
CVE-2024-36840
2024-06-12 00:00:00
exploitdb
exploitdb
Boelter Blue System Management 1.3 - SQL Injection
2024-06-14 00:00:00
nvd
nvd
CVE-2024-36840
2024-06-12 15:15:52
zdt
zdt
Boelter Blue System Management 1.3 - SQL Injection Vulnerability
2024-06-14 00:00:00
packetstorm
packetstorm
Boelter Blue System Management 1.3 SQL Injection
2024-06-06 00:00:00

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.3

Confidence

High

EPSS

0

Percentile

10.3%

JSON
Related for CVE-2024-36840
vulnrichment1cvelist1exploitdb1nvd1zdt1packetstorm1