CVE

CVE-2024-27718

7.8

CVSShigh

Requires local system access · low-privilege account sufficient.

Description

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.

Attack Vector

Local

Privileges Req.

Low

User Interaction

None

management_platform

Updated Sep 18, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2024-27718 Scanner

Targets the login endpoint's username parameter, allowing attackers to extract database credentials and session tokens.

Used 2.5k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: management_platform

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →