Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Mocodo Clear all filters
TI-2024-23405 CVE-2024-35374 · GHSA-j6cv-98jx-mrwr

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field…

Priority MEDIUM 54

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02767 Published 2024-05-24 Fixed in 4.2.7 CWE-77