CVE-2024-24027: SQL Injection
Published Feb 27, 2024
·Updated
SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.
Affected Software
2 affected components
Likeshop Likeshop<2.5.7
Likeshop Likeshop<2.5.7
Event History
Feb 27, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24027?
CVE-2024-24027 is classified as a critical vulnerability due to its potential to allow arbitrary SQL commands execution.
2
How do I fix CVE-2024-24027?
To fix CVE-2024-24027, upgrade your Likeshop installation to version 2.5.7 or later.
3
What are the consequences of exploiting CVE-2024-24027?
Exploitation of CVE-2024-24027 can lead to unauthorized access to sensitive data and the manipulation of your database.
4
Which versions of Likeshop are affected by CVE-2024-24027?
CVE-2024-24027 affects all versions of Likeshop prior to 2.5.7.
5
How can I detect if my system is vulnerable to CVE-2024-24027?
You can check your Likeshop version and look for suspicious SQL queries that exploit the DistributionMemberLogic::getFansLists function.