CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38755

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Designinvento DirectoryPress allows SQL Injection.This issue affects DirectoryPress: from n/a through 3.6.10.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.059

EPSS Ranking 90.2%

CVSS Severity

CVSS v3 Score 8.5

References

Products affected by CVE-2024-38755

Designinvento » Directorypress » Version: N/A

cpe:2.3:a:designinvento:directorypress:-
Designinvento » Directorypress » Version: 2.8.0

cpe:2.3:a:designinvento:directorypress:2.8.0
Designinvento » Directorypress » Version: 3.6.0

cpe:2.3:a:designinvento:directorypress:3.6.0
Designinvento » Directorypress » Version: 3.6.10

cpe:2.3:a:designinvento:directorypress:3.6.10
Designinvento » Directorypress » Version: 3.6.4

cpe:2.3:a:designinvento:directorypress:3.6.4
Designinvento » Directorypress » Version: 3.6.6

cpe:2.3:a:designinvento:directorypress:3.6.6
Designinvento » Directorypress » Version: 3.6.7

cpe:2.3:a:designinvento:directorypress:3.6.7
Designinvento » Directorypress » Version: 3.6.8

cpe:2.3:a:designinvento:directorypress:3.6.8
Designinvento » Directorypress » Version: 3.6.9

cpe:2.3:a:designinvento:directorypress:3.6.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38755

Products

Pricing

Contact Us