CVE-2024-12785: itsourcecode Vehicle Management System sendmail.php sql injection
First published: Thu Dec 19 2024(Updated: )
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| itsourcecode Vehicle Management System | ||
| Angeljudesuarez Vehicle Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-12785?
CVE-2024-12785 is classified as critical due to its potential for widespread impact through SQL injection.
How does CVE-2024-12785 affect the Vehicle Management System?
CVE-2024-12785 affects the Vehicle Management System by allowing an attacker to manipulate the id argument in sendmail.php to execute SQL injection attacks.
What versions of the Vehicle Management System are impacted by CVE-2024-12785?
CVE-2024-12785 impacts version 1.0 of the Vehicle Management System developed by itsourcecode.
How can CVE-2024-12785 be mitigated?
To mitigate CVE-2024-12785, developers should sanitize inputs and implement prepared statements to prevent SQL injection.
Can CVE-2024-12785 be exploited remotely?
Yes, CVE-2024-12785 can be exploited remotely, making it critical for users to address the vulnerability promptly.
- agent/references
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/itsourcecode
- canonical/itsourcecode vehicle management system
- vendor/angeljudesuarez
- canonical/angeljudesuarez vehicle management system
- version/angeljudesuarez vehicle management system/1.0