CVE-2023-24652: SQL Injection

Published Feb 27, 2023

Updated

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function.

Affected Software

2 affected components

Simple Customer Relationship Management System Project Simple Customer Relationship Management System=1.0

oretnom23 Simple Customer Relationship Management System=1.0

Event History

Feb 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-24652?

CVE-2023-24652 has been classified as a high severity vulnerability due to its exploitation potential leading to unauthorized database access.

How do I fix CVE-2023-24652?

To fix CVE-2023-24652, it's recommended to sanitize and validate user inputs, particularly the Description parameter in the Create ticket function.

What type of vulnerability is CVE-2023-24652?

CVE-2023-24652 is a SQL injection vulnerability which allows attackers to manipulate database queries.

Which version of the Simple Customer Relationship Management System is affected by CVE-2023-24652?

CVE-2023-24652 affects Simple Customer Relationship Management System version 1.0.

What could be the impact of exploiting CVE-2023-24652?

Exploiting CVE-2023-24652 could allow attackers to retrieve, modify, or delete data from the database, leading to data breaches.