CVE-2024-0462: code-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection
First published: Fri Jan 12 2024(Updated: )
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designee_view_status.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250567.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Faculty Clearance | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0462?
CVE-2024-0462 has been declared as critical.
Which software is affected by CVE-2024-0462?
CVE-2024-0462 affects the Fabianros Online Faculty Clearance System version 1.0.
What component is vulnerable in CVE-2024-0462?
The vulnerability in CVE-2024-0462 is found in the HTTP POST Request Handler specific to the file /production/designee_view_status.php.
How do I fix CVE-2024-0462?
To fix CVE-2024-0462, it is recommended to apply patches provided by the vendor or upgrade to a secure version of the software.
What type of attacks can CVE-2024-0462 allow?
CVE-2024-0462 could potentially allow for unauthorized access or manipulation of data due to its critical nature.
- agent/references
- agent/author
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/fabianros
- canonical/online faculty clearance
- version/online faculty clearance/1.0