turbomeeting 漏洞

严重CVE-2024-382892024/06/13

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server.

turbomeetingPoC 已收录

CVSS9.8EPSS 86.2%

高危CVE-2024-382882024/06/13

TurboMeeting - Post-Authentication Command Injection

The Certificate Signing Request (CSR) feature in the admin portal of the application is vulnerable to command injection. This vulnerability could allow authenticated admin users to execute arbitrary commands on the underlying server by injecting malicious input into the CSR generation process. The application failed to properly sanitize user-supplied input before using it in a command executed privileges.

turbomeetingPoC 已收录RCE

CVSS—EPSS 32.7%

turbomeeting

关联漏洞

TurboMeeting - Boolean-based SQL Injection

TurboMeeting - Post-Authentication Command Injection