PT-2024-37496 · Unknown · Pear Admin Boot

·

CVE-2024-6266

·

Published

2024-06-22

·

Updated

2024-09-19

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Pear Admin Boot versions up to 2.0.2
Description: A critical vulnerability has been found in Pear Admin Boot, affecting an unknown function of the file /system/dictData/loadDictItem. The manipulation leads to sql injection, and it is possible to launch the attack remotely.
Recommendations: For Pear Admin Boot versions up to 2.0.2, update to a version later than 2.0.2 to resolve the issue. As a temporary workaround, consider restricting access to the /system/dictData/loadDictItem file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-6266

Affected Products

Pear Admin Boot