CVE-2024-34533

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka izi_data) 11.0 through 17.x before 17.0.3 allows a remote attacker to gain privileges via a query to IZITools::query_check, IZITools::query_fetch, or IZITools::query_execute.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
odoo	odoo	>= 11.0, < 17.0.3

References

Timeline

Published: May 6, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-345347.3A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.1 allows a remote at CVE-2024-345355.9In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.CVE-2024-345374.9TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level CVE-2024-345387.5Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.CVE-2024-345399.4Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. T CVE-2024-34543.5An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party t CVE-2024-345425.7Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.CVE-2024-345437.8Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalat CVE-2024-345447.2A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafte CVE-2024-345455.7Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable info CVE-2024-345465.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Sticky Social Link stic CVE-2024-345475.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor