{"id":86340,"date":"2026-01-21T13:00:49","date_gmt":"2026-01-21T13:00:49","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2024-23815-critical-sql-injection-vulnerability-in-desigo-cc-server-application","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-23815-critical-sql-injection-vulnerability-in-desigo-cc-server-application\/","title":{"rendered":"CVE-2024-23815: Critical SQL Injection Vulnerability in Desigo CC Server Application<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2024-23815 vulnerability is a critical SQL injection flaw that affects Desigo CC server applications. The vulnerability has potential implications for any organization using Desigo CC, as it allows unauthenticated remote attackers to execute arbitrary SQL queries on the server database. This issue is particularly significant because of its potential for system compromise and data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-23815
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n