Critical severity9.8NVD Advisory· Published Oct 8, 2024· Updated Apr 15, 2026

CVE-2024-44349

Description

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

blog.cybergon.com/posts/cve-2024-44349/nvd
cybergon.comnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.061
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000