# CVEs published 2024-09-08

27 CVEs were published on September 8, 2024: 3 critical, 6 high. Days are UTC.

- [CVE-2024-8583](https://cve.now/CVE-2024-8583.md): SourceCodester Online Bank Management System Feedback mfeedback.php cross site scripting (CVSS 5.3, SourceCodester Online Bank Management System)
- [CVE-2024-8582](https://cve.now/CVE-2024-8582.md): SourceCodester Food Ordering Management System index.php cross site scripting (CVSS 5.3, SourceCodester Food Ordering Management System)
- [CVE-2024-8580](https://cve.now/CVE-2024-8580.md): TOTOLINK AC1200 T8 shadow.sample hard-coded password (CVSS 9.2, TOTOLINK AC1200 T8)
- [CVE-2024-8579](https://cve.now/CVE-2024-8579.md): TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2024-8578](https://cve.now/CVE-2024-8578.md): TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2024-8577](https://cve.now/CVE-2024-8577.md): TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8 · TOTOLINK AC1200 T10)
- [CVE-2024-8576](https://cve.now/CVE-2024-8576.md): TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8 · TOTOLINK AC1200 T10)
- [CVE-2024-8575](https://cve.now/CVE-2024-8575.md): TOTOLINK AC1200 T8 cstecgi.cgi setWiFiScheduleCfg buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2024-42343](https://cve.now/CVE-2024-42343.md): Loway - CWE-204: Observable Response Discrepancy (CVSS 5.3, Loway QueueMetrics)
- [CVE-2024-42342](https://cve.now/CVE-2024-42342.md): Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVSS 4.3, Loway QueueMetrics)
- [CVE-2024-42341](https://cve.now/CVE-2024-42341.md): Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') (CVSS 6.1, Loway QueueMetrics)
- [CVE-2024-8574](https://cve.now/CVE-2024-8574.md): TOTOLINK AC1200 T8 cstecgi.cgi setParentalRules os command injection (CVSS 5.3, TOTOLINK AC1200 T8)
- [CVE-2024-8573](https://cve.now/CVE-2024-8573.md): TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8 · TOTOLINK AC1200 T10)
- [CVE-2024-8572](https://cve.now/CVE-2024-8572.md): Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scripting (CVSS 5.3, Gouniverse GoLang CMS · github.com/gouniverse/cms)
- [CVE-2024-8571](https://cve.now/CVE-2024-8571.md): erjemin roll\_cms views.py information exposure (CVSS 5.1, erjemin roll\_cms)
- [CVE-2024-8570](https://cve.now/CVE-2024-8570.md): itsourcecode Tailoring Management System inccatadd.php sql injection (CVSS 5.3, itsourcecode Tailoring Management System)
- [CVE-2024-6928](https://cve.now/CVE-2024-6928.md): Opti Marketing \<= 2.0.9 - Unauthenticated SQLi (CVSS 9.8, Opti Marketing)
- [CVE-2024-6925](https://cve.now/CVE-2024-6925.md): TrueBooker \< 1.0.3 - Settings Update via CSRF (CVSS 4.3, TrueBooker)
- [CVE-2024-6924](https://cve.now/CVE-2024-6924.md): TrueBooker \< 1.0.3 - Multiple Unauthenticated SQLi (CVSS 9.8, TrueBooker)
- [CVE-2024-6859](https://cve.now/CVE-2024-6859.md): WP MultiTasking \<= 0.1.12 - Reflected XSS via Shortcode (CVSS 5.4, WP MultiTasking)
- [CVE-2024-6856](https://cve.now/CVE-2024-6856.md): WP MultiTasking \<= 0.1.12 - SMTP Settings Update via CSRF (CVSS 6.5, WP MultiTasking)
- [CVE-2024-6855](https://cve.now/CVE-2024-6855.md): WP MultiTasking \<= 0.1.12 - Exit Popup Update via CSRF (CVSS 6.5, WP MultiTasking)
- [CVE-2024-6853](https://cve.now/CVE-2024-6853.md): WP MultiTasking \<= 0.1.12 - Welcome Popup Update via CSRF (CVSS 6.5, WP MultiTasking)
- [CVE-2024-6852](https://cve.now/CVE-2024-6852.md): WP MultiTasking \<= 0.1.12 - Settings Update via CSRF (CVSS 6.5, WP MultiTasking)
- [CVE-2024-8569](https://cve.now/CVE-2024-8569.md): code-projects Hospital Management System user-login.php sql injection (CVSS 6.9, code-projects Hospital Management System)
- [CVE-2024-8568](https://cve.now/CVE-2024-8568.md): Mini-Tmall 1 rewardMapper.select sql injection (CVSS 5.3, Mini-Tmall)
- [CVE-2024-8567](https://cve.now/CVE-2024-8567.md): itsourcecode Payroll Management System ajax.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.