CVE-2024-12940: 1000 Projects Attendance Tracking Management System student_action.php sql injection
A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/studentaction.php. The manipulation of the argument studentid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12940?
CVE-2024-12940 is classified as a critical vulnerability.
How do I fix CVE-2024-12940?
Fix CVE-2024-12940 by sanitizing and validating the input for the student_id parameter in the /admin/student_action.php file to prevent SQL injection.
What impact does CVE-2024-12940 have on my system?
CVE-2024-12940 allows attackers to perform SQL injection, potentially leading to unauthorized access to the database.
Which software is affected by CVE-2024-12940?
CVE-2024-12940 affects the 1000 Projects Attendance Tracking Management System version 1.0.
What type of vulnerability is CVE-2024-12940?
CVE-2024-12940 is a SQL injection vulnerability.