{"id":"CVE-2024-41702","details":"SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","modified":"2026-08-27T09:37:37.899619Z","published":"2024-07-30T10:15:02.550Z","references":[{"type":"ADVISORY","url":"https://www.gov.il/en/Departments/faq/cve_advisories"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/Xtraball/Siberian","events":[{"introduced":"0"},{"fixed":"3540c670f2ed54f0d66cfc4709ef6096717e6b0e"}],"database_specific":{"cpe":"cpe:2.3:a:siberiancms:siberiancms:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.0.11"}],"source":"CPE_RANGE"}}],"versions":["5.0.9","4.19.1","4.19.0","4.18.25","v4.18.24","4.18.23","4.18.22","4.18.21","4.18.20","4.18.19","4.18.18","4.18.17","4.18.16","v4.18.14","v4.18.13","4.18.12","v4.18.11","4.18.9","4.18.8","v4.18.7","4.18.7","4.18.6","4.18.5","4.18.4","4.18.3","v4.18.2","v4.17.9","v4.16.0","4.14.15","v4.15.14","4.15.14","4.15.13","4.15.12","4.15.11","v4.15.10","4.15.9","4.15.8","4.15.7","4.15.6","4.15.5","4.15.4","4.15.3","v4.14.10","v4.13.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41702.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}