CVE-2024-11124 MEDIUM

CVE-2024-11124: TimGeyssens UIOMatic uioMaticObject.r sql injection

Vendor Timgeyssens

Product UIOMatic

Weakness CWE-89 · SQLi

Published November 12, 2024

Last update November 12, 2024

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

November 12, 2024 CVE published

November 12, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-11124 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-11611 SourceCodester Simple Inventory System user.php sql injection CVE-2024-49618 WordPress MyTweetLinks plugin <= 1.1.1 - SQL Injection vulnerability CVE-2023-2955 SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection CVE-2024-2622 Fujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection CVE-2025-9759 Campcodes/SourceCodester Courier Management System ajax.php signup sql injection