CVE-2024-12959: 1000 Projects Portfolio Management System MCA update_personal_details.php sql injection
A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /updatepersonaldetails.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12959?
CVE-2024-12959 is classified as a critical vulnerability.
How does CVE-2024-12959 affect the system?
CVE-2024-12959 allows for SQL injection through manipulation of the argument 'q' in the /update_personal_details.php file.
Can CVE-2024-12959 be exploited remotely?
Yes, CVE-2024-12959 can be initiated remotely by an attacker.
What software versions are affected by CVE-2024-12959?
CVE-2024-12959 affects the 1000 Projects Portfolio Management System MCA 1.0.
How can I mitigate CVE-2024-12959?
To mitigate CVE-2024-12959, it's essential to sanitize input and implement prepared statements in database queries.