CVE-2024-8335

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
OpenRapid	RapidCMS	1.3.0; 1.3.1
yuque	rapidcms	<= 1.3.1

References

https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection2/rapidcms%20runlogon.php%20SQL%20injection.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.276210Permissions Required
https://vuldb.com/?id.276210Third Party Advisory
https://vuldb.com/?submit.399005Third Party Advisory

Timeline

Published: Aug 30, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-83369.8A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown func CVE-2024-83375.4A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by t CVE-2024-83388.8A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functi CVE-2024-83399.8A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is CVE-2024-83409.8A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part CVE-2024-83419.8A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of CVE-2024-83428.8A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some u CVE-2024-83439.8A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0. Affected is an unkno CVE-2024-83448.8A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2024-83459.8A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. Affected by this issue is some unknown functi CVE-2024-83469.8A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function CVE-2024-83479.8A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability