TVN ID	TVN-202410012
CVE ID	CVE-2024-9982
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	AIM LINE Marketing Platform version from 3.3 to 5.8.4.
Description	AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content.
Solution	Contact the vendor to install the patch or update to version 6.0 or later.
Credit	Xin-Yue Song (CHT Security)
Public Date	2024-10-15