Critical severity9.8NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-22108

Description

An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GTB/Central Consoledescription
GTB/Central Consolellm-fuzzy
Range: =15.17.1-30814.NG

Patches

Vulnerability mechanics

References

adepts.of0x.cc/gtbcc-pwned/nvdExploitThird Party Advisory
x-c3ll.github.io/cves.htmlnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000