CVE-2024-36412 PoC — SuiteCRM 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36412.yaml

Associated Vulnerability

Title:SuiteCRM 安全漏洞 (CVE-2024-36412)
Description:SuiteCRM是SuiteCRM团队的一个客户关系管理系统。 SuiteCRM存在安全漏洞。攻击者利用该漏洞可以执行SQL注入攻击。

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

File Snapshot


 id: CVE-2024-36412

info:
  name: SuiteCRM - SQL Injection
  author: s4e-io
  severity: critical
  d

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.