CVE-2024-12964: 1000 Projects Daily College Class Work Report Book login.php sql injection
Published Dec 26, 2024
·Updated
A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
1000projects Daily College Class Work Report Book=1.0
1000 Projects Daily College Class Work Report Book
Event History
Dec 26, 2024
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-12964?
CVE-2024-12964 is classified as a critical vulnerability.
2
How does CVE-2024-12964 affect the application?
CVE-2024-12964 affects the /login.php file, allowing SQL injection through manipulation of the user argument.
3
Can CVE-2024-12964 be exploited remotely?
Yes, CVE-2024-12964 can be exploited remotely.
4
What mitigation steps can be taken for CVE-2024-12964?
To mitigate CVE-2024-12964, validate and sanitize user inputs in the login process.
5
What software is affected by CVE-2024-12964?
CVE-2024-12964 affects the 1000 Projects Daily College Class Work Report Book version 1.0.