CVE-2024-10969: 1000 Projects Bookstore Management System Login login_process.php sql injection

Published Nov 7, 2024

Updated

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/loginprocess.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

1000projects Bookstore Management System=1.0

Event History

Nov 7, 2024

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-10969?

CVE-2024-10969 has been rated as a critical vulnerability.

How does CVE-2024-10969 affect the system?

CVE-2024-10969 affects the login functionality of the 1000 Projects Bookstore Management System 1.0 and allows for SQL injection.

How do I fix CVE-2024-10969?

To fix CVE-2024-10969, it's essential to sanitize and validate user input in the '/admin/login_process.php' file to prevent SQL injection.

Which software versions are affected by CVE-2024-10969?

CVE-2024-10969 affects version 1.0 of the 1000 Projects Bookstore Management System.

What component is vulnerable in CVE-2024-10969?

The vulnerability in CVE-2024-10969 resides in the Login component of the system.