PatchTheCVECVE-2024-32212: SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to
CVE-2024-32212 is a high-severity flaw (CVSS 8.1) affecting lomag warehouse management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.1 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 48%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2024-05-01 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-32212?
lomag warehouse management: upgrade to newer than 1.0.20.120. Exact commands for each OS are on this page.
Is CVE-2024-32212 being exploited?
CVE-2024-32212 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-32212 affect?
CVE-2024-32212 affects lomag warehouse management. Severity is high (CVSS 8.1). SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.
How urgent is CVE-2024-32212?
Priority 51/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2024-32213 MEDIUM 5.3 UPGRADE The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords
- CVE-2024-32211 MEDIUM 5.5 UPGRADE An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensiti
- CVE-2024-32210 MEDIUM 5.3 UPGRADE The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords b