CVE-2023-24730: SQL Injection
Published Mar 15, 2023
·Updated
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.
Affected Software
2 affected components
Simple Customer Relationship Management System Project Simple Customer Relationship Management System=1.0
oretnom23 Simple Customer Relationship Management System=1.0
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-24730?
CVE-2023-24730 is classified as a medium severity vulnerability due to potential data exposure and manipulation risks.
2
How do I fix CVE-2023-24730?
To fix CVE-2023-24730, sanitize and validate user inputs in the 'company' parameter before processing SQL queries.
3
What type of vulnerability is CVE-2023-24730?
CVE-2023-24730 is a SQL injection vulnerability that can allow an attacker to execute arbitrary SQL queries.
4
Which application is affected by CVE-2023-24730?
CVE-2023-24730 affects Simple Customer Relationship Management System version 1.0.
5
What can attackers do with CVE-2023-24730?
Attackers exploiting CVE-2023-24730 can gain unauthorized access to the database and potentially extract, modify, or delete data.