Approved changes feed: RSS · Atom

cpe:2.3:a:codester:astrotalks:2023-10-03:*:*:*:*:*:*:*

part: a version: 2023-10-03 update: *

VendorCodester (1313b039-9d26-5f9f-9faf-193b920b911a)
ProductAstrotalks (364b07de-ec24-5bb1-aae4-b4c7bbb620ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5525 vulnerable 2026-06-08 06:56:16.248674 Improper privilege management vulnerability in Astrotalks
HIGH (8.3)
Improper privilege management vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability allows a local user to access the application as an administrator without any provided credentials, allowing the attacker to perform administrative actions.
Published: 2024-05-31T07:35:15.721Z
Updated: 2024-08-01T21:18:06.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5524 vulnerable 2026-06-08 06:56:16.248048 Information exposure vulnerability in Astrotalks
MEDIUM (5.3)
Information exposure vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability allows unregistered users to access all internal links of the application without providing any credentials.
Published: 2024-05-31T07:33:51.143Z
Updated: 2024-08-01T21:18:06.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5523 vulnerable 2026-06-08 06:56:16.247261 SQL injection vulnerability in Astrotalks
HIGH (8.8)
SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database.
Published: 2024-05-31T07:32:54.973Z
Updated: 2024-08-01T21:18:05.379Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.