CVE-2024-10140: code-projects Pharmacy Management System manage_supplier.php sql injection

Published Oct 19, 2024

Updated

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Code-projects Pharmacy Management System=1.0

Event History

Oct 19, 2024

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-10140?

CVE-2024-10140 is classified as a critical vulnerability.

How does CVE-2024-10140 exploit the Pharmacy Management System?

CVE-2024-10140 exploits the Pharmacy Management System through SQL injection via the 'id' parameter in /manage_supplier.php.

Which version of the software is affected by CVE-2024-10140?

CVE-2024-10140 affects version 1.0 of the Pharmacy Management System.

What potential impact does CVE-2024-10140 have on affected systems?

CVE-2024-10140 can lead to unauthorized database access and manipulation, potentially compromising sensitive information.

What steps should be taken to mitigate CVE-2024-10140?

To mitigate CVE-2024-10140, input validation and parameterized queries should be implemented to prevent SQL injection.