CVE-2024-9006

A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file config/config_invt1.php. The manipulation of the argument PASSOx leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as f4a8c748ec436e5a79f91ccb6a6f73752b336aa5. It is recommended to apply a patch to fix this issue.

• CWE-94
• CWE-94

• https://github.com/jeanmarc77/123solar/commit/f4a8c748ec436e5a79f91ccb6a6f73752b336aa5Patch
• https://github.com/jeanmarc77/123solar/issues/74Exploit, Issue Tracking, Third Party Advisory
• https://github.com/jeanmarc77/123solar/issues/74#issuecomment-2357653441Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.278162Permissions Required
• https://vuldb.com/?id.278162Third Party Advisory
• https://vuldb.com/?submit.408298Third Party Advisory

Published

Sep 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9000In lunary-ai/lunary before version 1.4.26, the checklists.po…6.5
• CVE-2024-9001A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It h…8.8
• CVE-2024-9002CWE-269: Improper Privilege Management vulnerability exists …7.8
• CVE-2024-9003A vulnerability was found in Jinan Chicheng Company JFlow 2.…5.3
• CVE-2024-9004A vulnerability classified as critical has been found in D-L…9.8
• CVE-2024-9005CWE-502: Deserialization of Untrusted Data vulnerability exi…7.3
• CVE-2024-9007A vulnerability classified as problematic has been found in …5.4
• CVE-2024-9008A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-9009A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-9010Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-9011A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-9012Rejected reason: This CVE ID has been rejected or withdrawn …