CVE-2024-10998: 1000 Projects Bookstore Management System process_category_add.php sql injection
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/processcategoryadd.php. The manipulation of the argument cat leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10998?
CVE-2024-10998 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2024-10998?
To fix CVE-2024-10998, update the Bookstore Management System to a patched version that addresses the SQL injection vulnerability.
What software is affected by CVE-2024-10998?
CVE-2024-10998 affects the 1000 Projects Bookstore Management System version 1.0.
What type of vulnerability is CVE-2024-10998?
CVE-2024-10998 is a SQL injection vulnerability that can be exploited through the /admin/process_category_add.php file.
Can CVE-2024-10998 be exploited remotely?
Yes, CVE-2024-10998 can be exploited remotely if the attacker can manipulate the cat parameter.