CVE-2024-13008: code-projects Responsive Hotel Site newsletter.php sql injection
A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13008?
CVE-2024-13008 is classified as a critical vulnerability.
How does CVE-2024-13008 affect affected systems?
CVE-2024-13008 allows for SQL injection through the manipulation of the eid parameter in the file /admin/newsletter.php.
Which software versions are impacted by CVE-2024-13008?
CVE-2024-13008 affects version 1.0 of the code-projects Responsive Hotel Site.
How can CVE-2024-13008 be mitigated?
To mitigate CVE-2024-13008, validate and sanitize user input to prevent SQL injection in the affected application.
What should I do if my system is vulnerable to CVE-2024-13008?
If your system is vulnerable to CVE-2024-13008, it is recommended to immediately apply security patches or updates from the vendor.