CVE-2024-0487: code-projects Fighting Cock Information System delete-vaccine.php sql injection

Published Jan 13, 2024

Updated

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250592.

Affected Software

1 affected component

Code-projects Fighting Cock Information System=1.0

Event History

Jan 13, 2024

CVE Published

via MITRE·12:31 PM

Data Sourced

via MITRE·12:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0487?

CVE-2024-0487 is classified as a critical vulnerability.

What does CVE-2024-0487 affect?

CVE-2024-0487 affects the Fighting Cock Information System version 1.0.

How does CVE-2024-0487 exploit occur?

CVE-2024-0487 exploits occur through SQL injection via the manipulation of the ref argument in the /admin/action/delete-vaccine.php file.

What are the potential impacts of CVE-2024-0487?

The potential impacts of CVE-2024-0487 include unauthorized access to the database and data manipulation.

How can I fix CVE-2024-0487?

To fix CVE-2024-0487, it is recommended to sanitize inputs and implement prepared statements to prevent SQL injection.