CVE-2024-9968

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

WebEIP v3.0 from

NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-99695.4NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into spec CVE-2024-99708.8The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate t CVE-2024-99718.8The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers wi CVE-2024-99729.8Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQ CVE-2024-99739.8A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of CVE-2024-99749.8A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an CVE-2024-99758.8A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some un CVE-2024-99769.8A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the f CVE-2024-99774.7A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26. Affected is an unknown functi CVE-2024-99785.5in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.CVE-2024-99795.3A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound CVE-2024-99808.8The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inj