First published: Sat Jan 13 2024(Updated: )
A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250592.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
=1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-0487 is classified as a critical vulnerability.
CVE-2024-0487 affects the Fighting Cock Information System version 1.0.
CVE-2024-0487 exploits occur through SQL injection via the manipulation of the ref argument in the /admin/action/delete-vaccine.php file.
The potential impacts of CVE-2024-0487 include unauthorized access to the database and data manipulation.
To fix CVE-2024-0487, it is recommended to sanitize inputs and implement prepared statements to prevent SQL injection.