CVE-2024-57151: SQL Injection
Published Mar 18, 2025
·Updated
SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function
Affected Software
2 affected components
rainrocka xinhu<2.6.5
Rockoa Xinhu<=2.6.5
Event History
Mar 18, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57151?
CVE-2024-57151 is classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2024-57151?
To fix CVE-2024-57151, upgrade to a version of rainrocka xinhu later than 2.6.5 that addresses the SQL injection issue.
3
What versions of rainrocka xinhu are affected by CVE-2024-57151?
CVE-2024-57151 affects rainrocka xinhu version 2.6.5 and earlier.
4
What is the attack vector for CVE-2024-57151?
CVE-2024-57151 can be exploited through crafted input sent to the inputAction.php file using the saveAjax function.
5
Can CVE-2024-57151 lead to data breaches?
Yes, if exploited, CVE-2024-57151 can allow attackers to execute arbitrary code, potentially leading to data breaches.