CVE-2024-10996: 1000 Projects Bookstore Management System process_category_edit.php sql injection
First published: Fri Nov 08 2024(Updated: )
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/process_category_edit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 1000projects Bookstore Management System PHP MySQL Project | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-10996?
CVE-2024-10996 is classified as a critical vulnerability.
What component is affected by CVE-2024-10996?
CVE-2024-10996 affects the /admin/process_category_edit.php file in the Bookstore Management System.
How is CVE-2024-10996 exploited?
CVE-2024-10996 can be exploited through SQL injection by manipulating the 'cat' argument.
What version of the software is impacted by CVE-2024-10996?
CVE-2024-10996 affects version 1.0 of the Bookstore Management System.
How can I mitigate CVE-2024-10996?
To mitigate CVE-2024-10996, you should validate and sanitize user inputs to prevent SQL injection.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/bookstore management system project
- canonical/1000projects bookstore management system php mysql project
- version/1000projects bookstore management system php mysql project/1.0