What is CVE-2024-8329?

CVE-2024-8329 is a high-severity vulnerability in 6shr System Project, classified under SQL Injection. CVSS score: 8.8/10. Published 2024-08-30.

How severe is CVE-2024-8329?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in 6shr System Project

CVE-2024-8329

6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL command to read, modify, and delete database contents.

Vulnerability class: SQL Injection

EPSS: 0.006 (45.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

6shr_system_project 6shr_system
Gether Technology 6shr System — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

twcert@cert.org.tw (Vendor Advisory, third-party-advisory)
twcert@cert.org.tw (Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-8329?: CVE-2024-8329 is a high-severity vulnerability in 6shr System Project, classified under SQL Injection. CVSS score: 8.8/10. Published 2024-08-30.
How severe is CVE-2024-8329?: High severity. CVSS v3 base score is 8.8 out of 10.