Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
References
| Link | Resource |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss | Third Party Advisory |
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss | Third Party Advisory |
Configurations
History
17 Apr 2025, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Amss\+\+ Project amss\+\+
Amss\+\+ Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amssplus-amss - Third Party Advisory | |
| CWE | ||
| CPE | cpe:2.3:a:amss\+\+_project:amss\+\+:4.31:*:*:*:*:*:*:* |
18 Mar 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-18 14:15
Updated : 2025-04-17 21:16
NVD link : CVE-2024-2590
Mitre link : CVE-2024-2590
JSON object : View
Products Affected
amss\+\+_project
- amss\+\+
CWE
No CWE.