CVE-2024-12492: code-projects Farmacia visualizar-usuario.php sql injection

Published Dec 11, 2024

Updated

A vulnerability was found in code-projects Farmacia 1.0. It has been rated as critical. This issue affects some unknown processing of the file /visualizar-usuario.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Anisha Farmacia=1.0

Event History

Dec 11, 2024

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionSeverityWeakness

Dec 12, 2024

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-12492?

CVE-2024-12492 has been rated as critical due to its potential for remote SQL injection.

How do I fix CVE-2024-12492?

To fix CVE-2024-12492, you should secure the input handling in the /visualizar-usuario.php file to prevent SQL injection.

What systems are affected by CVE-2024-12492?

CVE-2024-12492 affects version 1.0 of Anisha Farmacia software.

Can CVE-2024-12492 be exploited remotely?

Yes, the exploit for CVE-2024-12492 can be initiated remotely.

What type of vulnerability is CVE-2024-12492?

CVE-2024-12492 is an SQL injection vulnerability found in the input processing of a specific file.