Description
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
Published: 2024-03-18
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-27534 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
History

Mon, 24 Mar 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Amss\+\+ Project
Amss\+\+ Project amss\+\+
CPEs cpe:2.3:a:amss\+\+_project:amss\+\+:4.31:*:*:*:*:*:*:*
Vendors & Products Amss\+\+ Project
Amss\+\+ Project amss\+\+

Subscriptions

Amss\+\+ Project Amss\+\+
cve-icon MITRE

Status: PUBLISHED

Assigner: INCIBE

Published:

Updated: 2024-08-15T14:10:27.669Z

Reserved: 2024-03-18T11:08:52.785Z

Link: CVE-2024-2585

cve-icon Vulnrichment

Updated: 2024-08-01T19:18:47.898Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-18T14:15:10.290

Modified: 2025-04-10T20:47:32.580

Link: CVE-2024-2585

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')