First published: Sat Jan 13 2024(Updated: )
A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown functionality of the file modifyuser.php. The manipulation of the argument user_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250580.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
code-projects Dormitory Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-0475 is classified as a critical vulnerability due to its potential impact on database integrity.
CVE-2024-0475 is an SQL injection vulnerability affecting the 'modifyuser.php' file in the Dormitory Management System.
To fix CVE-2024-0475, sanitize and validate input parameters in the 'modifyuser.php' file to prevent SQL injection.
CVE-2024-0475 affects version 1.0 of the Dormitory Management System by code-projects.
Exploitation of CVE-2024-0475 may allow an attacker to execute arbitrary SQL queries, potentially compromising sensitive data.