QSearchQSearch

CVE-2024-6919

9.8 CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc

Published: 2024-09-02 · Last updated: 2026-06-03

Severity and scoring

CVSS
9.8 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-89

Affected products

VendorProduct
nacnacpremium

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2024-6921 — Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc (7.5 HIGH)
  • CVE-2024-6920 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc (6.1 MEDIUM)

Same CWE

  • CVE-2026-12175 — A vulnerability was detected in CodeAstro Student Attendance Management System 1.0 (4.7 MEDIUM)
  • CVE-2026-6428 — SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 2... (7.6 HIGH)
  • CVE-2026-9848 — The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and i... (7.5 HIGH)
  • CVE-2026-12131 — A weakness has been identified in CodeAstro Human Resource Management System 1.0 (6.3 MEDIUM)
  • CVE-2026-44172 — MariaDB server is a community developed fork of MySQL server