CVE-2024-34534

7.3 highEPSS 0.5%

High (7.3). EPSS 0.5% chance of exploitation in the next 30 days.

A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.1 allows a remote attacker to gain privileges via the data parameter to models/ir_model.py:IrModel::chech_model.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/luvsn/OdZoo/tree/main/exploits/text_commander
https://github.com/luvsn/OdZoo/tree/main/exploits/text_commander

Check your stack JSON