CVE-2024-6039
MEDIUMFeng Office 3.11.1.2 - SQL Injection via Workspaces Component
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-6039. PoCs published by Andrey Stoykov.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in Feng Office 3.11.1.2, specifically targeting the 'dim' parameter in a GET request. It provides instructions for using SQLMap to exploit the vulnerability but does not include direct exploit code.
Description
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268752.
Exploits (1)
This is a writeup describing a SQL injection vulnerability in Feng Office 3.11.1.2, specifically targeting the 'dim' parameter in a GET request. It provides instructions for using SQLMap to exploit the vulnerability but does not include direct exploit code.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L