CVE-2024-10136: code-projects Pharmacy Management System manage_invoice.php sql injection
Published Oct 19, 2024
·Updated
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manageinvoice.php. The manipulation of the argument invoicenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Code-projects Pharmacy Management System=1.0
Event History
Oct 19, 2024
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-10136?
CVE-2024-10136 has been declared as critical.
2
What type of vulnerability is CVE-2024-10136?
CVE-2024-10136 is an SQL injection vulnerability.
3
Which file is affected by CVE-2024-10136?
The vulnerability affects the file /manage_invoice.php.
4
How does CVE-2024-10136 exploit the system?
CVE-2024-10136 can be exploited by manipulating the invoice_number argument.
5
How can I mitigate CVE-2024-10136?
To mitigate CVE-2024-10136, it is recommended to sanitize and validate user inputs in the affected application.