CVE-2024-30801

MediumCVSS 5.5

Published: 14/05/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.42%

70th percentile - higher than 70% of all known CVEs

Summary

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to the Login.asp component.

Risk Assessment

An attacker can gain unauthorized access to the database, steal or modify sensitive customer data, and take control of the system.

Recommendation

Immediately update the platform to the latest version and apply parameterized SQL queries in the Login.asp component to prevent code injection.

Original NVD description (English source)

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component.