Alireza Gharib Blog

CVE-2024-55517 – Polaris FT Intellect Core Banking SQL Injection

CVE ID : CVE-2024-55517

Published : Jan. 8, 2025, 4:15 p.m. | 5 hours, 28 minutes ago

Description : An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Go to Source

Tags: #cve, #cybersecurity, #go, #security

Related Posts

SonicWall urges admins to patch exploitable SSLVPN bug immediately CVE-2025-22145 – Carbon PHP DateTime Remote File Include Vulnerability CVE-2025-22143 – WeGIA Web Manager Reflected Cross-Site Scripting CVE-2025-22141 – WeGIA Web Manager SQL Injection Vulnerability CVE-2025-22140 – WeGIA SQL Injection Vulnerability (Authenticated) CVE-2025-22137 – Pingvin Share File Traversal CVE-2025-0291 – Google Chrome Type Confusion Vulnerability CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw CVE-2025-0194 – GitLab Information Disclosure CVE-2024-55656 – Redis RedisBloom Probabilistic Data Structures Integer Overflow Information Leak Out-of-Bounds Write CVE-2024-54818 – SourceCodester Computer Laboratory Management System Unauthenticated Remote OS Command Injection CVE-2024-53995 – SickChill Open Redirect Vulnerability CVE-2024-52869 – Teradata SUSE Enterprise Linux Server Elevated Privilege Group Misassignment CVE-2024-51442 – Minidlna Command Injection Vulnerability CVE-2024-45345 – Cisco WebEx Data Placeholder Command Injection Vulnerability CVE-2024-45344 – Apache HTTPd Denial of Service CVE-2024-45343 – Adobe Flash PathTraversal CVE-2024-45342 – Cisco Router Denial of Service CVE-2024-12431 – GitLab Unauthorized Issue Status Manipulation Windows 11’s TPM 2.0: Free Software Foundation Fights Forced Upgrades and E-Waste
, , , ,
, , ,
Recent Posts