CVE-2024-12497: 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12497?
CVE-2024-12497 is classified as a critical vulnerability.
How does CVE-2024-12497 affect the Attendance Tracking Management System?
CVE-2024-12497 affects the /admin/check_admin_login.php file and allows SQL injection through the admin_user_name parameter.
What are the potential impacts of exploiting CVE-2024-12497?
Exploiting CVE-2024-12497 can lead to unauthorized access to the database and sensitive data exposure.
How can I fix CVE-2024-12497?
To fix CVE-2024-12497, sanitize and validate the input for the admin_user_name parameter to prevent SQL injection.
Is there a patch available for CVE-2024-12497?
As of now, there is no official patch available for CVE-2024-12497, so implementing input validation is crucial.