CVE-2024-10607: code-projects Courier Management System track-result.php sql injection
A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10607?
CVE-2024-10607 has been classified as a critical vulnerability.
How does CVE-2024-10607 affect the Courier Management System?
CVE-2024-10607 affects the file /track-result.php and leads to SQL injection through improper handling of the Consignment argument.
Can CVE-2024-10607 be exploited remotely?
Yes, CVE-2024-10607 can be exploited remotely by manipulating the Consignment argument.
What versions of the Courier Management System are affected by CVE-2024-10607?
CVE-2024-10607 specifically affects Courier Management System version 1.0.
How can I fix CVE-2024-10607?
To fix CVE-2024-10607, it is recommended to apply input validation and use prepared statements for database queries in the affected code.