medium6.3Public exploit code
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BigAnt Office Messenger 5.6.06 - SQL Injection2025-08-18 · webapps · multiple
Impact
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bigantsoft | Bigant Office Messenger 5 | Version 5.6.0.6 |