CVE-2024-35374

Published: 2024-05-24T21:15Z

Last Modified: 2024-11-21T09:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution (RCE) under certain conditions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt