First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-46626

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
os4ed	opensis	9.1

References

https://github.com/d0ub1edd/CVE-Reference/blob/main/CVE-2024-46626.mdExploit, Third Party Advisory

Timeline

Published: Oct 2, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-466279.1Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.CVE-2024-466289.8Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName paramet CVE-2024-46636.4The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions CVE-2024-466324.3Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.CVE-2024-466355.9An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information CVE-2024-466369.4NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the CVE-2024-466397.6A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted paylo CVE-2024-46644.8The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2024-466409.8SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check CVE-2024-466446.5eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.CVE-2024-466457.5eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.CVE-2024-466466.5eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.

CVE-2024-46626: High severity, CVSS 8.8 | Vulnix