CVE-2024-38888

Related Files

Caterease SQL Injection / Command Injection / Bypass

Posted Aug 2, 2024

Authored by Calvin Star, Austin Henderson, jTag Labs

This is the official vulnerability disclosure report for CVEs CVE-2024-38881 through CVE-2024-38891 by jTag Labs. This report details critical security vulnerabilities found within Caterease, a product of Horizon Business Services Inc. These vulnerabilities have significant implications for the confidentiality, integrity, and availability of the software and the sensitive data it handles. The issues include problems like remote SQL injection, command injection, authentication bypass, hard-coded credentials, and more.

tags | advisory, paper, remote, vulnerability, code execution, sql injection, bypass, info disclosure

advisories | CVE-2024-38881, CVE-2024-38882, CVE-2024-38883, CVE-2024-38884, CVE-2024-38885, CVE-2024-38886, CVE-2024-38887, CVE-2024-38888, CVE-2024-38889, CVE-2024-38890, CVE-2024-38891

SHA-256 | 922dd24931dfc780dbe72f5070222b4450361d9b42c8b9a975582549453b4573

Download | Favorite | View