CVE-2024-12941: CodeAstro Blood Donor Management System deletedannounce.php sql injection

Published Dec 26, 2024

Updated

A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/deletedannounce.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Codeastro Blood Donor Management System

Codeastro Blood Donor Management System=1.0

Event History

Dec 26, 2024

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-12941?

CVE-2024-12941 is classified as a critical vulnerability.

How does CVE-2024-12941 occur?

CVE-2024-12941 occurs due to SQL injection through the manipulation of the 'id' argument in the file /pages/deletedannounce.php.

Can CVE-2024-12941 be exploited remotely?

Yes, the vulnerability CVE-2024-12941 can be initiated through a remote attack.

What systems are affected by CVE-2024-12941?

CVE-2024-12941 affects CodeAstro Blood Donor Management System version 1.0.

How do I fix CVE-2024-12941?

To fix CVE-2024-12941, it is recommended to validate and sanitize all user inputs to prevent SQL injection.