CVE-2024-11100: 1000 Projects Beauty Parlour Management System index.php sql injection

Published Nov 12, 2024

Updated

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

1000projects Beauty Parlour Management System=1.0

Event History

Nov 12, 2024

CVE Published

via MITRE·03:31 AM

Data Sourced

via MITRE·03:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11100?

CVE-2024-11100 has been declared as critical.

How does CVE-2024-11100 affect the Beauty Parlour Management System?

CVE-2024-11100 affects the file /index.php, where the manipulation of the argument name can lead to SQL injection.

What type of vulnerability is CVE-2024-11100?

CVE-2024-11100 is a SQL injection vulnerability.

How can I mitigate the risks associated with CVE-2024-11100?

To mitigate the risks of CVE-2024-11100, properly validate and sanitize user inputs to prevent SQL injection.

What version of the Beauty Parlour Management System is affected by CVE-2024-11100?

CVE-2024-11100 affects version 1.0 of the 1000 Projects Beauty Parlour Management System.