CVE-2024-10139: code-projects Pharmacy Management System add_new_supplier.php sql injection
A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addnewsupplier.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10139?
CVE-2024-10139 is classified as a critical vulnerability.
How does CVE-2024-10139 affect Pharmacy Management System 1.0?
CVE-2024-10139 affects the file /add_new_supplier.php, which allows for SQL injection through manipulation of the name parameter.
Can CVE-2024-10139 be exploited remotely?
Yes, CVE-2024-10139 can be exploited remotely by attackers.
What can be done to mitigate CVE-2024-10139?
To mitigate CVE-2024-10139, it is advisable to sanitize user inputs and apply proper parameterized queries in the affected PHP file.
Are there patches available for CVE-2024-10139?
Currently, no official patches have been released for CVE-2024-10139, so users should implement immediate security measures.