CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.10% chance of exploitation in the next 30 days, 63th percentile

Nuclei

high

Published

2024-03-04

Updated

2024-08-27

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27718.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-2771
• CVE-2024-27719
• CVE-2024-27705
• CVE-2024-2773
• CVE-2024-27703
• CVE-2024-2774