CVE-2024-12928: code-projects Simple Admin Panel sql injection
Published Dec 25, 2024
·Updated
A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument cname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Simple Admin Panel
Code-projects Simple Admin Panel=1.0
Event History
Dec 25, 2024
CVE Published
via MITRE·11:31 PM
Data Sourced
via MITRE·11:31 PM
DescriptionSeverityWeakness
Dec 26, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Oct 27, 57234
Event
via NVD·05:41 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-12928?
CVE-2024-12928 is classified as a critical vulnerability.
2
How does CVE-2024-12928 exploit occur?
CVE-2024-12928 exploits a SQL injection vulnerability through manipulation of the c_name argument.
3
What software is affected by CVE-2024-12928?
CVE-2024-12928 affects Code-Projects Simple Admin Panel version 1.0.
4
Can CVE-2024-12928 be exploited remotely?
Yes, CVE-2024-12928 can be exploited remotely.
5
What are the mitigation steps for CVE-2024-12928?
Mitigation for CVE-2024-12928 involves applying input validation and using prepared statements to prevent SQL injection.