CVE-2024-3370

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template allows SQL Injection.

This issue affects Website Template: before 29.04.2024.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Egebilgi Software	Website Template	< 29.04.2024
egeabilgi_software	website_template	< 29.04.2024

References

Timeline

Published: Nov 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-337007.5The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attacker CVE-2024-33716.8MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application b CVE-2024-33727.5Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authenticat CVE-2024-337226.3SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].CVE-2024-337245.4SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.CVE-2024-33739.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website Template allows SQL CVE-2024-33745.3An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BS CVE-2024-337484.1Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.CVE-2024-337499.1DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.CVE-2024-33759.4Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Co CVE-2024-337526.3An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote CVE-2024-337538.2Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed