# CVEs published 2024-08-04

13 CVEs were published on August 4, 2024: 0 critical, 1 high. Days are UTC.

- [CVE-2024-7461](https://cve.now/CVE-2024-7461.md): ForIP Tecnologia Administração PABX monitcallcenter authMonitCallcenter sql injection (CVSS 6.9, ForIP Tecnologia Administração PABX)
- [CVE-2024-7460](https://cve.now/CVE-2024-7460.md): OSWAPP Warehouse Inventory System change\_password.php cross-site request forgery (CVSS 6.9, OSWAPP Warehouse Inventory System)
- [CVE-2024-7459](https://cve.now/CVE-2024-7459.md): OSWAPP Warehouse Inventory System edit\_account.php cross-site request forgery (CVSS 6.9, OSWAPP Warehouse Inventory System)
- [CVE-2024-7458](https://cve.now/CVE-2024-7458.md): elunez eladmin Database Management/Deployment Management upload path traversal (CVSS 5.1, elunez eladmin)
- [CVE-2024-35143](https://cve.now/CVE-2024-35143.md): IBM Planning Analytics Local missing authentication (CVSS 6.7, IBM Planning Analytics Local)
- [CVE-2024-7455](https://cve.now/CVE-2024-7455.md): itsourcecode Tailoring Management System partedit.php sql injection (CVSS 5.3, itsourcecode Tailoring Management System)
- [CVE-2024-7454](https://cve.now/CVE-2024-7454.md): SourceCodester Clinics Patient Management System patients.php patient\_name sql injection (CVSS 5.3, SourceCodester Clinics Patient Management System)
- [CVE-2024-7453](https://cve.now/CVE-2024-7453.md): FastAdmin Attachment Management Section 4 cross site scripting (CVSS 5.1, FastAdmin)
- [CVE-2024-7452](https://cve.now/CVE-2024-7452.md): itsourcecode Placement Management System view\_company.php sql injection (CVSS 5.3, itsourcecode Placement Management System)
- [CVE-2024-7451](https://cve.now/CVE-2024-7451.md): itsourcecode Placement Management System apply\_now.php sql injection (CVSS 5.3, itsourcecode Placement Management System)
- [CVE-2024-7450](https://cve.now/CVE-2024-7450.md): itsourcecode Placement Management System Image resume\_upload.php unrestricted upload (CVSS 5.3, itsourcecode Placement Management System)
- [CVE-2024-7449](https://cve.now/CVE-2024-7449.md): itsourcecode Placement Management System login.php sql injection (CVSS 6.9, itsourcecode Placement Management System)
- [CVE-2024-6331](https://cve.now/CVE-2024-6331.md): Injection by Prompt Injection in stitionai/devika (CVSS 7.5, stitionai/devika)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.