CVE-2024-10845: 1000 Projects Bookstore Management System book_detail.php sql injection
Published Nov 5, 2024
·Updated
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file bookdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
1000projects Bookstore Management System=1.0
Event History
Nov 5, 2024
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-10845?
CVE-2024-10845 is classified as critical.
2
How does CVE-2024-10845 affect the Bookstore Management System?
CVE-2024-10845 allows for SQL injection through the manipulation of the 'id' argument in the book_detail.php file.
3
Can CVE-2024-10845 be exploited remotely?
Yes, the vulnerability identified in CVE-2024-10845 can be initiated remotely.
4
Which version of the Bookstore Management System is affected by CVE-2024-10845?
CVE-2024-10845 affects version 1.0 of the 1000 Projects Bookstore Management System.
5
What type of attack is possible with CVE-2024-10845?
CVE-2024-10845 allows attackers to execute SQL injection attacks against the affected system.