Skip to content Dark Web Informer - Cyber Threat Intelligence

CVE-2024-54820: Vulnerability: Unauthenticated SQL Injection - Clear Credentials Dump

🚨 Critical Security Vulnerability
🆔 CVE-2024-54820
💣 CVSS Score: 9.8
📅 Published Date: 2025-02-24

⚠️ Details: XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login page. This vulnerability allows attackers to extract all usernames and passwords via a crafted input.

🛠 References:
🔗 GitHub: https://github.com/jcarabantes/CVE-2024-54820
🔗 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-54820

Latest