CVE-2024-10369: Codezips Sales Management System addcustcom.php sql injection
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addcustcom.php. The manipulation of the argument refno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10369?
CVE-2024-10369 has been declared as critical.
How does CVE-2024-10369 impact affected systems?
CVE-2024-10369 allows for SQL injection through the manipulation of the argument refno in the /addcustcom.php file.
What is the affected software for CVE-2024-10369?
The affected software for CVE-2024-10369 is Codezips Sales Management System version 1.0.
How can CVE-2024-10369 be mitigated?
To mitigate CVE-2024-10369, input validation and parameterized queries should be implemented to prevent SQL injection.
Is there a known exploit for CVE-2024-10369?
Yes, CVE-2024-10369 can be exploited remotely.