{ "id": "CVE-2024-24027", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-27T21:15:47.180", "lastModified": "2024-02-28T14:06:45.783", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists." }, { "lang": "es", "value": "La vulnerabilidad de inyecci\u00f3n SQL en Likeshop anterior a 2.5.7 permite a los atacantes ejecutar comandos SQL arbitrarios a trav\u00e9s de la funci\u00f3n DistributionMemberLogic::getFansLists." } ], "metrics": {}, "references": [ { "url": "https://samyueru.substack.com/p/cve-2024-24027-sql-injection-trong-likeshop", "source": "cve@mitre.org" } ] }