CVE-2024-48700
Improper Control of Generation of Code ('Code Injection') (CWE-94)
Published: Oct 25, 2024 / Updated: 25d ago
010
CVSS 7.2EPSS 0.04%High
CVE info copied to clipboard
Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-48700
Oct 25, 2024 at 6:15 PM
First Article
Feedly found the first article mentioning CVE-2024-48700. See article
Oct 25, 2024 at 6:21 PM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 25, 2024 at 6:21 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.8%)
Oct 26, 2024 at 9:53 AM
CVSS
A CVSS base score of 7.2 has been assigned.
Oct 29, 2024 at 7:40 PM / nvd
Affected Systems
Kliqqi/cms
+null more
Attack Patterns
CAPEC-242: Code Injection
+null more
News
CVE-2024-48700
Critical Severity Description Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component. Read more at https://www.tenable.com/cve/CVE-2024-48700
NA - CVE-2024-48700 - Kliqqi-CMS has a background arbitrary code...
Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.
CVE-2024-48700
Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php...
CVE-2024-48700 - Kliqqi-CMS Background Code Execution Vulnerability
CVE ID : CVE-2024-48700 Published : Oct. 25, 2024, 6:15 p.m. 15 minutes ago Description : Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component. Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2024-48700
Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.
See 1 more articles and social media posts