CVE-2024-10165: Codezips Sales Management System deletecustcom.php sql injection
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10165?
CVE-2024-10165 has been declared as critical due to its potential for SQL injection.
How does the SQL injection in CVE-2024-10165 occur?
The SQL injection in CVE-2024-10165 occurs through manipulation of the 'id' argument in the deletecustcom.php file.
Who is affected by CVE-2024-10165?
CVE-2024-10165 affects users of Codezips Sales Management System version 1.0.
Can CVE-2024-10165 be exploited remotely?
Yes, CVE-2024-10165 can be exploited remotely, allowing attackers to execute unauthorized SQL queries.
How can I patch CVE-2024-10165?
To patch CVE-2024-10165, it is recommended to update to a secure version of the Codezips Sales Management System or review input validation methods on the affected script.