CVE-2024-9921

9.8 criticalEPSS 0.7%

Critical (9.8) in teamplus team\+ pro. EPSS 0.7% chance of exploitation in the next 30 days.

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-10-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teamplus:team\+_pro

References

https://www.twcert.org.tw/en/cp-139-8125-4a1ad-2.html
https://www.twcert.org.tw/tw/cp-132-8124-d9b92-1.html

Check your stack JSON