CVE-2024-8301

CVE-2024-8301 is a critical SQL injection vulnerability affecting dingfanzu CMS, specifically within the /ajax/checkin.php file when processing the 'username' argument. This vulnerability allows for remote exploitation without authentication, enabling attackers to achieve full compromise of confidentiality, integrity, and availability. While the vendor has not responded to disclosure, exploit details are publicly available, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.