CVE-2024-2077: SourceCodester Simple Online Bidding System index.php sql injection
Published Mar 1, 2024
·Updated
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255393 was assigned to this vulnerability.
Affected Software
1 affected component
oretnom23 Simple Online Bidding System=1.0
Event History
Mar 1, 2024
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-2077?
CVE-2024-2077 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2024-2077?
CVE-2024-2077 is an SQL injection vulnerability.
3
Where in the Simple Online Bidding System does CVE-2024-2077 occur?
CVE-2024-2077 affects the file index.php.
4
Can CVE-2024-2077 be exploited remotely?
Yes, CVE-2024-2077 can be exploited remotely.
5
How do I fix CVE-2024-2077?
To fix CVE-2024-2077, sanitize and validate user inputs, especially the category_id parameter.