CVE-2024-10969: 1000 Projects Bookstore Management System Login login_process.php sql injection
First published: Thu Nov 07 2024(Updated: )
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login_process.php of the component Login. The manipulation of the argument unm leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 1000projects Bookstore Management System PHP MySQL Project | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-10969?
CVE-2024-10969 has been rated as a critical vulnerability.
How does CVE-2024-10969 affect the system?
CVE-2024-10969 affects the login functionality of the 1000 Projects Bookstore Management System 1.0 and allows for SQL injection.
How do I fix CVE-2024-10969?
To fix CVE-2024-10969, it's essential to sanitize and validate user input in the '/admin/login_process.php' file to prevent SQL injection.
Which software versions are affected by CVE-2024-10969?
CVE-2024-10969 affects version 1.0 of the 1000 Projects Bookstore Management System.
What component is vulnerable in CVE-2024-10969?
The vulnerability in CVE-2024-10969 resides in the Login component of the system.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/1000projects
- canonical/1000projects bookstore management system php mysql project
- version/1000projects bookstore management system php mysql project/1.0