CVE-2024-3370CWE-89
SQLi in Egebilgi Software's Website Template
High · published November 18, 2024
What it is
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template allows SQL Injection.
This issue affects Website Template: before 29.04.2024.
The record
Technical detail
- CVSS v4.0
- 8.8 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00321 · 23.9th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2024-11-18T12:52Z
EPSS history
Timeline