CVE-2024-9921 - CVE House

Status published Critical CVE-2024-9921

TEAMPLUS TECHNOLOGY Team+ - SQL Injection

9.8 CVSS

Vulnerability Description

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-9921

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from teamplus technology

View All →

CVE-2024-9923

TEAMPLUS TECHNOLOGY Team+ - Arbitrary File Move through Path Traversal

Medium 4.9

CVE-2024-9922

TEAMPLUS TECHNOLOGY Team+ - Arbitrary File Read through Path Traversal

High 7.5

Affected Vendor

teamplus technology

View all reports →

Affected Software

team+

Vulnerable Versions:

13.5.*

Timeline

Official Publish: October 14th, 2024

Last Modified: October 15th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1059 Command and Scripting Interpreter

Execution

T1213.006 Databases

Collection

T1485 Data Destruction

Impact