CVE-2024-0470: code-projects Human Resource Integrated System inc_service_credits.php sql injection

Published Jan 12, 2024

Updated

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /adminroute/incservicecredits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250575.

Affected Software

1 affected component

Code-projects Human Resource Integrated System=1.0

Event History

Jan 12, 2024

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0470?

CVE-2024-0470 is classified as a critical vulnerability.

What type of vulnerability is CVE-2024-0470?

CVE-2024-0470 is an SQL injection vulnerability.

Which file is affected by CVE-2024-0470?

CVE-2024-0470 affects the file /admin_route/inc_service_credits.php.

How do I fix CVE-2024-0470?

To fix CVE-2024-0470, ensure that all SQL queries in the affected file are properly parameterized.

What software is impacted by CVE-2024-0470?

CVE-2024-0470 impacts version 1.0 of the Human Resource Integrated System by code-projects.