What’s Vulnerable › Vulnerabilities

CVE-2024-30801

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-14 · updated 2026-07-09
• Weakness: CWE-89

Description

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component.

Affected products

• Beijing Xinwang Medical Information Technology Cloud Based Customer Service Management Platform: 1.0.0

References

• http://www.minipacs.com/ylqxrj
• https://github.com/WarmBrew/web_vul/blob/main/Cloud%20based%20customer%20service/SQLi.md
• http://www.minipacs.com/ylqxrj
• https://github.com/WarmBrew/web_vul/blob/main/Cloud%20based%20customer%20service/SQLi.md

Get alerted when CVE-2024-30801 or the next vulnerability affects your stack