CVE-2024-5635

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267091.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jun 4, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-563504.3In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects CVE-2024-563518.8In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles CVE-2024-563525.4In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page CVE-2024-563536.5In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies CVE-2024-563544.9In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission CVE-2024-563555.4In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS CVE-2024-563567.1In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack CVE-2024-563576.1grist-core is a spreadsheet hosting server. A user visiting a malicious document or submitting a malicious form could have their account com CVE-2024-563586.1grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compr CVE-2024-563596.1grist-core is a spreadsheet hosting server. A user visiting a malicious document and clicking on a link in a HyperLink cell using a control CVE-2024-56369.8A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some u CVE-2024-563615.3LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identifie