CVE-2024-10202CWE-78

Wellchoose Administrative Management System - OS Command Injection

High · published October 21, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01096 · 65.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-10-21T03:19Z
EPSS history
Timeline
  • 21 OCT 03:19Z
    Wellchoose Administrative Management System - OS Command Injection
    cvelistv5