CVE-2024-10426: Codezips Pet Shop Management System animalsadd.php sql injection
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions the parameter "refno" to be affected. But further inspection indicates that the name of the affected parameter is "id".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10426?
CVE-2024-10426 is classified as a critical vulnerability.
What type of vulnerability is CVE-2024-10426?
CVE-2024-10426 is classified as an SQL injection vulnerability.
What part of the Codezips Pet Shop Management System is affected by CVE-2024-10426?
CVE-2024-10426 affects the file /animalsadd.php.
Can CVE-2024-10426 be exploited remotely?
Yes, CVE-2024-10426 can be exploited remotely.
How do I fix CVE-2024-10426?
To fix CVE-2024-10426, input validation and parameterized queries should be implemented in the affected code.