CVE-2024-12926: Codezips Project Management System advanced.php sql injection
A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12926?
CVE-2024-12926 is classified as a critical vulnerability due to its potential for SQL injection attacks.
How does CVE-2024-12926 affect the Codezips Project Management System?
CVE-2024-12926 affects the Codezips Project Management System 1.0 through a vulnerability in the /pages/forms/advanced.php file.
What type of vulnerability is CVE-2024-12926?
CVE-2024-12926 is an SQL injection vulnerability that can be exploited remotely.
How can I mitigate the risks associated with CVE-2024-12926?
To mitigate CVE-2024-12926, consider updating the Codezips Project Management System to the latest version or implementing input validation.
Is there a specific version of the Codezips Project Management System affected by CVE-2024-12926?
Yes, CVE-2024-12926 specifically affects the Codezips Project Management System version 1.0.