CVE-2024-10608: code-projects Courier Management System login.php sql injection
A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10608?
CVE-2024-10608 has been rated as critical due to its potential for remote SQL injection.
How does CVE-2024-10608 impact the Courier Management System?
CVE-2024-10608 allows attackers to manipulate the txtusername argument in /login.php, leading to SQL injection.
Can CVE-2024-10608 be exploited remotely?
Yes, CVE-2024-10608 can be exploited remotely, which increases the risk of attacks.
Which version of the Courier Management System is affected by CVE-2024-10608?
CVE-2024-10608 affects version 1.0 of the Courier Management System.
How can I fix the vulnerability described in CVE-2024-10608?
To fix CVE-2024-10608, ensure proper input validation and sanitization for the txtusername parameter in the login process.