CVE-2024-12188: 1000 Projects Library Management System stu.php sql injection

Published Dec 5, 2024

Updated

A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

1000projects Library Management System=1.0

Event History

Dec 5, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-12188?

CVE-2024-12188 has been declared as a critical vulnerability.

How does CVE-2024-12188 exploit the system?

CVE-2024-12188 allows for SQL injection through manipulation of the useri argument in the /brains/stu.php file.

What software is affected by CVE-2024-12188?

CVE-2024-12188 affects version 1.0 of the 1000 Projects Library Management System.

How do I fix CVE-2024-12188?

To fix CVE-2024-12188, ensure to implement proper input validation and sanitize user inputs in the affected script.

Can CVE-2024-12188 lead to data breaches?

Yes, CVE-2024-12188's SQL injection vulnerability could potentially lead to unauthorized access to sensitive data.