NU1L0/CVE-2024-46636-SQLi-MODAPS

NU1L0/CVE-2024-46636-SQLi-MODAPS

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backend SQL queries, potentially leading to unauthorized data access and database compromise.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-46636↗
9.4 CRITICAL—

NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter