CVE-2023-24728: SQL Injection
Published Mar 15, 2023
·Updated
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.
Affected Software
2 affected components
Simple Customer Relationship Management System Project Simple Customer Relationship Management System=1.0
oretnom23 Simple Customer Relationship Management System=1.0
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-24728?
The severity of CVE-2023-24728 is high with a score of 8.8.
2
How can I mitigate the SQL injection vulnerability in Simple Customer Relationship Management System v1.0 (CVE-2023-24728)?
To mitigate the SQL injection vulnerability, ensure to sanitize and validate the input for the contact parameter in the user profile update function.