TVN ID	TVN-202411005
CVE ID	CVE-2024-11020
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	Webopac 6, Webopac 7
Description	Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.
Solution	Update Webopac 6 to version 6.5.1 or later Update Webopac 7 to version 7.2.3 or later.
Credit	TSAI, MING-HUNG, Shoui Tseng, WoodMan Kang (Onward Security Corporation)
Public Date	2024-11-08