Read the docs

SEUR

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SEUR records in CISA KEV

No SEUR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Seur 1 record MEDIUM

Records

1 record in Seur · all components

TI-2024-08537 CVE-2024-9201 · GHSA-7vhh-8w84-5hwq

SQL injection vulnerability in SEUR plugin

Priority MEDIUM 49

The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0049 Published 2024-10-10 Fixed in 2.5.11 CWE-89
Open these records in search →