CVE-2024-10446: Project Worlds Online Time Table Generator admindashboard.php sql injection
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=addcourse. The manipulation of the argument c leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10446?
CVE-2024-10446 is classified as a critical vulnerability.
How do I fix CVE-2024-10446?
To mitigate CVE-2024-10446, ensure you sanitize and validate the input for the 'c' argument in the affected PHP file.
What software is affected by CVE-2024-10446?
CVE-2024-10446 affects Project Worlds Online Time Table Generator version 1.0.
What kind of vulnerability is CVE-2024-10446?
CVE-2024-10446 is an SQL injection vulnerability, which can lead to unauthorized database access.
Where is CVE-2024-10446 found in the code?
CVE-2024-10446 is located in the file /timetable/admin/admindashboard.php at the 'info=add_course' function.