CVE-2024-11968: code-projects Farmacia pagamento.php sql injection
Published Nov 28, 2024
·Updated
A vulnerability was found in code-projects Farmacia up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file pagamento.php. The manipulation of the argument notaFiscal leads to sql injection. The attack can be launched remotely.
Affected Software
1 affected component
Anisha Farmacia=1.0
Event History
Nov 28, 2024
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-11968?
CVE-2024-11968 is classified as a critical vulnerability.
2
How do I fix CVE-2024-11968?
To fix CVE-2024-11968, it is recommended to sanitize inputs related to the notaFiscal argument in the pagamento.php file to prevent SQL injection.
3
What type of attack can be performed using CVE-2024-11968?
CVE-2024-11968 allows for a remote SQL injection attack through the manipulation of the notaFiscal argument.
4
Which software versions are affected by CVE-2024-11968?
CVE-2024-11968 affects Anisha Farmacia version 1.0.
5
What file is involved in the CVE-2024-11968 vulnerability?
The file involved in CVE-2024-11968 is pagamento.php.