Critical severityNVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-6527

Description

SQL Injection vulnerability in parameter "w" in file "druk.php" in MegaBIP software allows unauthorized attacker to disclose the contents of the database and obtain administrator's token to modify the content of pages. This issue affects MegaBIP software versions through 5.13.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Megabip/Megabipllm-fuzzy
Range: <=5.13

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2024/07/CVE-2024-6527/nvd
cert.pl/posts/2024/07/CVE-2024-6527/nvd
megabip.plnvd
www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznejnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000