CVE-2024-24622
CVSS V2 None
CVSS V3 None
Description
Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system.
Overview
- CVE ID
- CVE-2024-24622
- Assigner
- XI
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-07-25T21:44:53.974Z
- Last Modified Date
- 2024-07-25T21:44:53.974Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://blog.exodusintel.com/2024/07/24/softaculous-webuzo-password-reset-command-injection/ | third-party-advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-24622 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24622 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-07-26 13:05:36 | Added to TrackCVE |