CVE-2024-10736: Codezips Free Exam Hall Seating Management System student.php sql injection
A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10736?
CVE-2024-10736 has been rated as critical due to its potential for remote exploitation.
What type of vulnerability is CVE-2024-10736?
CVE-2024-10736 is an SQL injection vulnerability affecting the email argument in the /student.php file.
How do I fix CVE-2024-10736?
To fix CVE-2024-10736, sanitize and validate user inputs in the /student.php file to prevent SQL injection.
Which software is affected by CVE-2024-10736?
CVE-2024-10736 affects Codezips Free Exam Hall Seating Management System version 1.0.
Can CVE-2024-10736 be exploited remotely?
Yes, CVE-2024-10736 can be exploited remotely by manipulating the email argument.