CVE-2024-24092: SQL Injection
Published Mar 12, 2024
·Updated
SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.
Affected Software
2 affected components
Code-projects.org Scholars Tracking System
Code-projects Scholars Tracking System=1.0
Event History
Mar 12, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24092?
CVE-2024-24092 has a critical severity due to its potential for arbitrary code execution via SQL injection.
2
How do I fix CVE-2024-24092?
To fix CVE-2024-24092, update the Scholars Tracking System to the latest patched version or implement proper input validation to prevent SQL injection.
3
What systems are affected by CVE-2024-24092?
CVE-2024-24092 affects the Code-projects.org Scholars Tracking System version 1.0.
4
How can CVE-2024-24092 be exploited?
CVE-2024-24092 can be exploited by an attacker to execute arbitrary SQL queries through the login.php page.
5
Are there any mitigations for CVE-2024-24092?
Mitigations for CVE-2024-24092 include employing web application firewalls and ensuring secure coding practices to prevent SQL injection vulnerabilities.