CVE-2024-48204

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted script.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-482069.8A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code.CVE-2024-482088.6pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.CVE-2024-48215.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightboCVE-2024-482134.3RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.CVE-2024-482148.4KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. TCVE-2024-482178.8An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.CVE-2024-482187.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.CVE-2024-48226.1Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability CVE-2024-482227.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.CVE-2024-482237.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.CVE-2024-482244.9Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.CVE-2024-482256.5Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
CVE-2024-48204: Critical severity, CVSS 9.8 | Vulnix