How severe is CVE-2024-13204?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.5 out of 10.

What type of vulnerability is CVE-2024-13204?

This is classified as CWE-74, which is a common weakness in software security.

CVE-2024-13204 - MEDIUM Severity | CVSS 5.5

Vulnerability Description

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blog_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related Vulnerabilities

CVE-2016-3695

MEDIUM

CVSS:5.5(Medium)

The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disabl...

CWE-742016

CVE-2017-18049

MEDIUM

CVSS:5.5(Medium)

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without ...

CWE-742017

CVE-2018-4235

MEDIUM

CVSS:5.5(Medium)

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the...

CWE-742018

CVE-2020-24821

MEDIUM

CVSS:5.5(Medium)

A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.

CWE-742020

CVE-2020-24822

MEDIUM

CVSS:5.5(Medium)

A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.

CWE-742020

CVE-2020-24823

MEDIUM

CVSS:5.5(Medium)

A vulnerability in the dwarf::to_string function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.

CWE-742020