CVE-2024-0498: Project Worlds Lawyer Management System searchLawyer.php sql injection

Published Jan 13, 2024

Updated

A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file searchLawyer.php. The manipulation of the argument experience leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250603.

Affected Software

1 affected component

Projectworlds Online Lawyer Management System=1.0

Event History

Jan 13, 2024

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0498?

CVE-2024-0498 has been declared as critical due to a SQL injection vulnerability.

How does CVE-2024-0498 exploit a vulnerability?

CVE-2024-0498 exploits the experience argument in the searchLawyer.php file to manipulate SQL queries.

What software versions are affected by CVE-2024-0498?

CVE-2024-0498 affects version 1.0 of the Project Worlds Lawyer Management System.

How can CVE-2024-0498 be mitigated?

To mitigate CVE-2024-0498, it is recommended to sanitize all user inputs and employ prepared statements.

What are the potential impacts of exploiting CVE-2024-0498?

Exploiting CVE-2024-0498 can lead to unauthorized access to the database and manipulation of sensitive information.