CVE-2024-12965: 1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /updateexdetail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12965?
CVE-2024-12965 has been declared as critical.
How does CVE-2024-12965 affect the 1000 Projects Portfolio Management System MCA?
CVE-2024-12965 affects the file /update_ex_detail.php and can lead to SQL injection through manipulation of the argument q.
Can CVE-2024-12965 be exploited remotely?
Yes, the attack for CVE-2024-12965 can be initiated remotely.
What should I do to remediate CVE-2024-12965?
To fix CVE-2024-12965, you should update your 1000 Projects Portfolio Management System MCA to the latest version or apply security patches provided by the vendor.
What type of vulnerability is CVE-2024-12965?
CVE-2024-12965 is classified as an SQL injection vulnerability.