CVE-2024-6735

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271456.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Tailoring Management System	1.0
itsourcecode	tailoring_management_system	1.0

References

https://github.com/xzyxiaohaha/cve/issues/1Exploit
https://vuldb.com/?ctiid.271456Permissions Required
https://vuldb.com/?id.271456Third Party Advisory
https://vuldb.com/?submit.374516Third Party Advisory
https://github.com/xzyxiaohaha/cve/issues/1Exploit
https://vuldb.com/?ctiid.271456Permissions Required
https://vuldb.com/?id.271456Third Party Advisory
https://vuldb.com/?submit.374516Third Party Advisory

Timeline

Published: Jul 15, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-67368.8A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue aff CVE-2024-67378.8The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote CVE-2024-67385.3The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain spe CVE-2024-67396.1The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentiall CVE-2024-67406.1Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within CVE-2024-67415.3Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vuln CVE-2024-67425.4AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inj CVE-2024-67439.8AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL CVE-2024-67449.8The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability.CVE-2024-67459.8A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the fil CVE-2024-67468.8A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown f CVE-2024-67477.5Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 (EOL) allows attacker to get potentially sen