CVE-2024-0464: code-projects Online Faculty Clearance HTTP GET Request delete_faculty.php sql injection

Published Jan 12, 2024

Updated

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file deletefaculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250569 was assigned to this vulnerability.

Affected Software

1 affected component

Code-projects Online Faculty Clearance=1.0

Event History

Jan 12, 2024

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0464?

CVE-2024-0464 is classified as a critical vulnerability.

How do I fix CVE-2024-0464?

To fix CVE-2024-0464, validate and sanitize all input parameters, particularly the 'id' parameter in delete_faculty.php.

What type of vulnerability is CVE-2024-0464?

CVE-2024-0464 is a SQL injection vulnerability affecting the HTTP GET Request Handler.

Which software is impacted by CVE-2024-0464?

CVE-2024-0464 affects version 1.0 of the code-projects Online Faculty Clearance software.

What are the potential risks of CVE-2024-0464?

Exploiting CVE-2024-0464 can allow attackers to manipulate database queries, potentially gaining unauthorized access to sensitive data.