CVE-2024-12934: code-projects Simple Admin Panel updateItemController.php sql injection
Published Dec 26, 2024
·Updated
A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument pdesk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Simple Admin Panel
Code-projects Simple Admin Panel=1.0
Event History
Dec 26, 2024
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Oct 27, 57234
Event
via NVD·05:41 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-12934?
CVE-2024-12934 is classified as a critical vulnerability.
2
How does CVE-2024-12934 affect Simple Admin Panel?
CVE-2024-12934 affects the updateItemController.php file, allowing for SQL injection through the manipulation of the p_desk argument.
3
Can CVE-2024-12934 be exploited remotely?
Yes, CVE-2024-12934 can be exploited remotely.
4
What type of vulnerability is CVE-2024-12934?
CVE-2024-12934 is classified as an SQL injection vulnerability.
5
How can I remediate CVE-2024-12934?
To remediate CVE-2024-12934, it is recommended to sanitize and validate all user inputs to prevent SQL injection.