CVE-2024-0462: code-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designeeviewstatus.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250567.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0462?
CVE-2024-0462 has been declared as critical.
Which software is affected by CVE-2024-0462?
CVE-2024-0462 affects the Fabianros Online Faculty Clearance System version 1.0.
What component is vulnerable in CVE-2024-0462?
The vulnerability in CVE-2024-0462 is found in the HTTP POST Request Handler specific to the file /production/designee_view_status.php.
How do I fix CVE-2024-0462?
To fix CVE-2024-0462, it is recommended to apply patches provided by the vendor or upgrade to a secure version of the software.
What type of attacks can CVE-2024-0462 allow?
CVE-2024-0462 could potentially allow for unauthorized access or manipulation of data due to its critical nature.