CVE-2024-27718

Description

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.

References

https://github.com/tldjgggg/cve/blob/main/sql.md

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24912

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS