CVE-2024-44349

—

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Oct 8, 2024 (Oct 8, 2024)

Modified

Jun 17, 2026

Description

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.8%)

In the news0 stories

No ingested article mentions this CVE yet.