CVE-2024-22638

EUVD-2024-20172
liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the component /livesite/edit_designer_region.php or /livesite/add_email_campaign.php.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
livesitelivesite
2019.1
𝑥
= Vulnerable software versions
References
https://packetstormsecurity.com/files/176420/liveSite-2019.1-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/51936
https://packetstormsecurity.com/files/176420/liveSite-2019.1-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/51936