CVE-2024-0486: code-projects Fighting Cock Information System add_con.php sql injection

Published Jan 13, 2024

Updated

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/addcon.php. The manipulation of the argument chicken leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250591.

Affected Software

1 affected component

Code-projects Fighting Cock Information System=1.0

Event History

Jan 13, 2024

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0486?

The severity of CVE-2024-0486 is classified as critical.

How does CVE-2024-0486 exploit occur?

CVE-2024-0486 exploits through SQL injection via manipulation of the 'chicken' argument in the file /admin/action/add_con.php.

What versions are affected by CVE-2024-0486?

CVE-2024-0486 affects Fighting Cock Information System version 1.0.

How do I fix CVE-2024-0486?

To fix CVE-2024-0486, you should sanitize user inputs to prevent SQL injection vulnerabilities.

Is there a patch available for CVE-2024-0486?

Currently, there is no specific patch detailed for CVE-2024-0486, so users should implement mitigation strategies.