QSearchQSearch

CVE-2024-6917

9.8 CRITICAL

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase O...

Published: 2024-08-12 · Last updated: 2026-06-03

Severity and scoring

CVSS
9.8 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-78

Affected products

VendorProduct
veribaseorder_management

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2023-3377 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software Computer Veribas... (9.8 CRITICAL)

Same CWE

  • CVE-2026-46716 — Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool (9.9 CRITICAL)
  • CVE-2026-42853 — ApostropheCMS is an open-source Node.js content management system (6.5 MEDIUM)
  • CVE-2026-48165 — MariaDB server is a community developed fork of MySQL server (8.0 HIGH)
  • CVE-2026-48163 — MariaDB server is a community developed fork of MySQL server (8.0 HIGH)
  • CVE-2026-44170 — MariaDB server is a community developed fork of MySQL server