CVE-2024-0946

A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of the file /apply/index.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252190 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-918
• CWE-918

• https://note.zhaoj.in/share/iNSyaClT0hGiBroken Link
• https://vuldb.com/?ctiid.252190Permissions Required
• https://vuldb.com/?id.252190Permissions Required
• https://note.zhaoj.in/share/iNSyaClT0hGiBroken Link
• https://vuldb.com/?ctiid.252190Permissions Required
• https://vuldb.com/?id.252190Permissions Required

Published

Jan 26, 2024

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0939A vulnerability has been found in Byzoro Smart S210 Manageme…9.8
• CVE-2024-0941A vulnerability was found in Novel-Plus 4.3.0-RC1 and classi…9.8
• CVE-2024-0942A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_…4.3
• CVE-2024-0943A vulnerability was found in Totolink N350RT 9.3.5u.6255. It…5.3
• CVE-2024-0944A vulnerability was found in Totolink T8 4.1.5cu.833_2022090…5.3
• CVE-2024-0945A vulnerability classified as critical has been found in 60I…9.8
• CVE-2024-0947Reliance on Cookies without Validation and Integrity Checkin…9.8
• CVE-2024-0948** DISPUTED ** A vulnerability, which was classified as prob…6.1
• CVE-2024-0949Missing Authentication, Files or Directories Accessible to E…9.8
• CVE-2024-0951The Advanced Social Feeds Widget & Shortcode WordPress plugi…4.8
• CVE-2024-0952The WP ERP | Complete HR solution with recruitment & job lis…7.2
• CVE-2024-0953When a user scans a QR Code with the QR Code Scanner feature…6.1