CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2024-6670

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-08-29
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

Affected Platforms (CPE)

📦
Progress

Whatsup Gold

< 24.0

References & Advisories

🔗 https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
🔗 https://www.progress.com/network-monitoring
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6670

相關漏洞威脅

CVE-2026-120651.8

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of th...

CVE-2025-394654.3

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configure...

CVE-2025-628995.9

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THRIVE - Web Design Gold Coa...

CVE-2010-100158.4

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos...