Cyber Posture

CVE-2024-57765

HighPublic PoC

Published: 15 January 2025

Published
15 January 2025
Modified
10 April 2025
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0021 43.0th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-57765 is a high-severity SQL Injection (CWE-89) vulnerability in Wangl1989 Mysiteforme. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Databases (T1213.006); ranked at the 43.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Databases (T1213.006). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly prevents SQL injection attacks like CVE-2024-57765 by enforcing validation of untrusted inputs such as the s_name parameter before database queries.

prevent

Mandates timely flaw remediation, including patching or upgrading MSFM to version 2025.01.01 or later to eliminate the specific SQL injection vulnerability.

detect

Facilitates detection of SQL injection exploitation through continuous monitoring of database queries and anomalous access patterns resulting in unauthorized data disclosure.

MITRE ATT&CK Enterprise TechniquesAI

T1213.006 Databases Collection
Adversaries may leverage databases to mine valuable information.
Why these techniques?

The SQL injection vulnerability in the backend admin interface (s_name parameter) allows arbitrary database queries, enabling adversaries to collect data from databases.

NVD Description

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.

Deeper analysisAI

CVE-2024-57765 is a SQL injection vulnerability (CWE-89) affecting MSFM versions prior to 2025.01.01. The issue arises via the s_name parameter in the table/list endpoint, allowing malicious SQL payloads to be injected and executed.

The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating it can be exploited remotely by unauthenticated attackers with low complexity and no user interaction. Successful exploitation enables high confidentiality impact, such as unauthorized access to sensitive database contents.

Advisories and additional details are available at https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVK9. Mitigation involves upgrading to MSFM 2025.01.01 or later.

Details

CWE(s)

Affected Products

wangl1989
mysiteforme
≤ 2025-01-01

CVEs Like This One

CVE-2025-26136Same product: Wangl1989 Mysiteforme
CVE-2024-57764Same product: Wangl1989 Mysiteforme
CVE-2024-57763Same product: Wangl1989 Mysiteforme
CVE-2024-57762Same product: Wangl1989 Mysiteforme
CVE-2024-13139Same product: Wangl1989 Mysiteforme
CVE-2024-57766Same product: Wangl1989 Mysiteforme
CVE-2024-57767Same product: Wangl1989 Mysiteforme
CVE-2024-13136Same product: Wangl1989 Mysiteforme
CVE-2024-13138Same product: Wangl1989 Mysiteforme
CVE-2025-22710Shared CWE-89

References