.. / CVE-2024-24112

• SQLi
• PoC
• Nuclei
• Web

Exploit for Exrick XMall v1.1 - Unauthenticated SQL Injection (CVE-2024-24112)

Description:

XMall v1.1 was discovered to contain a SQL injection vulnerability via the ‘orderDir’ parameter.

Affected Products:

• Exrick XMall v1.1 (not fixed)

Nuclei Template

View the template here CVE-2024-24112.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-24112.yaml

References: