CVE-2024-5958

8.8 HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command ...

Published: 2024-09-18 · Last updated: 2026-06-03

Severity and scoring

CVSS: 8.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-89

Affected products

Vendor	Product
elizsoftware	panel

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.

Source: NVD

References

Related CVEs

Same vendor

CVE-2024-6877 — Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows R... (6.1 MEDIUM)
CVE-2024-5960 — Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials (9.8 CRITICAL)
CVE-2024-5959 — Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows S... (5.4 MEDIUM)

Same CWE

CVE-2026-12206 — A vulnerability was identified in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
CVE-2026-12188 — A vulnerability was detected in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
CVE-2026-12175 — A vulnerability was detected in CodeAstro Student Attendance Management System 1.0 (4.7 MEDIUM)
CVE-2026-6428 — SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 2... (7.6 HIGH)
CVE-2026-9848 — The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and i... (7.5 HIGH)