CVE-2024-1346

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

6.8 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 32th percentile

Published

2024-02-19

Updated

2024-08-28

Proof-of-concept exploits (1)

• PeterGabaldon/CVE-2024-13462★ · 2024-02-25

References

• CVE Record
• NVD entry

Related

• CVE-2024-7479
• CVE-2024-7481
• CVE-2025-40677
• CVE-2024-13384
• CVE-2024-1347
• CVE-2024-13383