CVE-2024-0482 - Taokeyun HTTP POST Request Video.php index sql injection

Back Back to CVE browser

CRITICAL

Taokeyun HTTP POST Request Video.php index sql injection

Published Jan 13, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.50%

Description

A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250587.

Affected products

Vendor n/a Product Taokeyun Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  -
- Version
  1.0.1
  Status
  affected
  Constraints
  -
- Version
  1.0.2
  Status
  affected
  Constraints
  -
- Version
  1.0.3
  Status
  affected
  Constraints
  -
- Version
  1.0.4
  Status
  affected
  Constraints
  -
- Version
  1.0.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Taokeyun

n/a

Version	Status	Constraints
1.0.0	affected	-
1.0.1	affected	-
1.0.2	affected	-
1.0.3	affected	-
1.0.4	affected	-
1.0.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://note.zhaoj.in/share/MuWxURhTIYTP
broken-linkexploitBroken Link
https://vuldb.com/?ctiid.250587
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.250587
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://note.zhaoj.in/share/MuWxURhTIYTP		broken-linkexploitBroken Link
https://vuldb.com/?ctiid.250587		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.250587		vdb-entrytechnical-descriptionThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Jan 13, 2024

Updated Jun 3, 2025

Reserved Jan 12, 2024

Link CVE-2024-0482

CISA Vulnrichment

Updated May 8, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-0482

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-0482