← All advisories

Critical severity9.6NVD Advisory· Published Jun 13, 2024· Updated Jun 17, 2026

CVE-2024-38293

CVE-2024-38293

Description

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.

Affected products

3

ALCASAR/ALCASAR3 versions
cpe:2.3:a:alcasar:alcasar:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:alcasar:alcasar:*:*:*:*:*:*:*:*range: <3.6.1
- (no CPE)
- (no CPE)range: <3.6.1

Patches

Vulnerability mechanics

References

2

adullact.net/frs/download.php/file/8930/CHANGELOG.mdnvdRelease Notes
alcasar.net/downloadnvdProduct

News mentions

0

No linked articles in our index yet.