CVE-2024-2060: SourceCodester Petrol Pump Management Software login_crud.php sql injection
A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/app/logincrud.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255375.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2060?
CVE-2024-2060 is classified as a critical vulnerability.
How does CVE-2024-2060 affect the Petrol Pump Management Software?
CVE-2024-2060 allows for SQL injection through the manipulation of the email parameter in the /admin/app/login_crud.php file.
What versions of Mayurik Petrol Pump Management Software are impacted by CVE-2024-2060?
CVE-2024-2060 affects version 1.0 of Mayurik Petrol Pump Management Software.
Can CVE-2024-2060 be exploited remotely?
Yes, CVE-2024-2060 can be exploited remotely due to its SQL injection nature.
How do I fix CVE-2024-2060?
To fix CVE-2024-2060, it is recommended to sanitize user input and implement prepared statements in the affected PHP file.