VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Dec 22, 2024· Updated Jun 17, 2026

CVE-2024-12894

CVE-2024-12894

Description

A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Treasurehuntgame/Treasurehunt3 versions
    cpe:2.3:a:treasurehuntgame:treasurehunt:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:treasurehuntgame:treasurehunt:*:*:*:*:*:*:*:*range: <2024-05-04
    • (no CPE)range: <=963e0e0
    • (no CPE)range: 963e0e0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.