CVE-2024-10733: code-projects Restaurant Order System login.php sql injection
Published Nov 3, 2024
·Updated
A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Carmelogarcia Restaurant Order System=1.0
Event History
Nov 3, 2024
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-10733?
CVE-2024-10733 is classified as a critical vulnerability.
2
How does CVE-2024-10733 impact the Restaurant Order System?
CVE-2024-10733 allows for SQL injection through the manipulation of the uid argument in the /login.php file.
3
Can CVE-2024-10733 be exploited remotely?
Yes, the CVE-2024-10733 vulnerability can be exploited remotely.
4
What versions of the software are affected by CVE-2024-10733?
CVE-2024-10733 affects version 1.0 of the Restaurant Order System.
5
How can I mitigate CVE-2024-10733?
To mitigate CVE-2024-10733, ensure proper input validation and parameterized queries to prevent SQL injection.