Description

Mura/Masa CMS has an SQL Injection vulnerability that allows unauthenticated attackers to gain access to sensitive data and compromise the system.

Remediation

Upgrade to the latest version of Mura CMS or Masa CMS

References

Hacking Apple - SQL Injection to Remote Code Execution

Related Vulnerabilities

Atlassian Jira Missing Authorization Vulnerability (CVE-2019-20407)

WebLogic CVE-2021-2294 Vulnerability (CVE-2021-2294)

Oracle Application Server CVE-2006-0274 Vulnerability (CVE-2006-0274)

Beego Framework CVE-2021-30080 Vulnerability (CVE-2021-30080)

Moodle Other Vulnerability (CVE-2004-1978)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

SQL Injection Known Vulnerabilities CWE-89 CVE-2024-32640