CVE-2024-27718
published 2024-03-05CVE-2024-27718: SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate…
PriorityP346high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EXPLOIT
EPSS
1.10%
61.6th percentile
SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Smart s200 Management Platform v.S200 - SQL Injection
nuclei·CVSS 7.8
CVE-2024-27718 [HIGH] Smart s200 Management Platform v.S200 - SQL Injection
Smart s200 Management Platform v.S200 - SQL Injection
SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.
Template:
id: CVE-2024-27718
info:
name: Smart s200 Management Platform v.S200 - SQL Injection
author: DhiyaneshDk
severity: high
description: |
SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.
impact: |
Authenticated attackers can extract sensitive database information via SQL injection in the importexport.php component.
remediation: |
Update Smart s200 Management Platform to a versi
2024-03-05
Published