CVE-2024-1924: CodeAstro Membership Management System get_membership_amount.php sql injection
First published: Tue Feb 27 2024(Updated: )
A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /get_membership_amount.php. The manipulation of the argument membershipTypeId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254859.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CodeAstro Membership Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1924?
CVE-2024-1924 is classified as critical due to its potential for SQL injection.
How do I fix CVE-2024-1924?
To fix CVE-2024-1924, implement input validation and use parameterized queries to prevent SQL injection.
What components are affected by CVE-2024-1924?
CVE-2024-1924 affects the CodeAstro Membership Management System version 1.0, specifically the /get_membership_amount.php file.
What type of vulnerability is CVE-2024-1924?
CVE-2024-1924 is an SQL injection vulnerability that exploits the membershipTypeId argument.
Can CVE-2024-1924 be exploited remotely?
Yes, CVE-2024-1924 can potentially be exploited remotely by manipulating requests to the vulnerable endpoint.
- agent/weakness
- agent/title
- agent/description
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/codeastro
- canonical/codeastro membership management system
- version/codeastro membership management system/1.0