CVE-2024-12187: 1000 Projects Library Management System showbook.php sql injection

Published Dec 5, 2024

Updated

A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

1000projects Library Management System=1.0

Event History

Dec 5, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-12187?

CVE-2024-12187 has been classified as a critical vulnerability.

How do I fix CVE-2024-12187?

To mitigate CVE-2024-12187, you should update the 1000 Projects Library Management System to a patched version that addresses the SQL injection vulnerability.

What does CVE-2024-12187 affect?

CVE-2024-12187 affects version 1.0 of the 1000 Projects Library Management System.

How can CVE-2024-12187 be exploited?

CVE-2024-12187 can be exploited remotely through SQL injection by manipulating the 'q' argument in the /showbook.php file.

What are the potential impacts of CVE-2024-12187?

The exploitation of CVE-2024-12187 can lead to unauthorized data access and manipulation in the Library Management System.