.. / CVE-2024-4295

• SQLi
• Nuclei
• Web

Exploit for Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash (CVE-2024-4295)

Description:

Email Subscribers by Icegram Express <= 5.7.20 contains an unauthenticated SQL injection vulnerability via the hash parameter.

Nuclei Template

View the template here CVE-2024-4295.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-4295.yaml

References: