New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-31822

ExploitedNVDCIRCLENISA

EUVD-2024-29694 · Published Apr 29, 2024

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component.

Technologies

Ecommerce-Codeigniter-Bootstrap_Project Ecommerce-Codeigniter-Bootstrap

Weaknesses

CWE-94

CVSS scores

  • v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Stealth

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot