CVE-2024-25307: SQL Injection
Published Feb 9, 2024
·Updated
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."
Affected Software
1 affected component
Code-projects Cinema Seat Reservation System=1.0
Event History
Feb 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Aug 19, 56091
Event
via FIRST·06:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-25307?
The severity of CVE-2024-25307 is classified as high due to the potential for SQL Injection exploitation.
2
How do I fix CVE-2024-25307?
To fix CVE-2024-25307, validate and sanitize the 'id' parameter before using it in SQL queries.
3
Which version of Code-projects Cinema Seat Reservation System is affected by CVE-2024-25307?
CVE-2024-25307 affects version 1.0 of Code-projects Cinema Seat Reservation System.
4
What type of vulnerability is CVE-2024-25307?
CVE-2024-25307 is an SQL Injection vulnerability allowing attackers to manipulate database queries.
5
What is the impact of exploiting CVE-2024-25307?
Exploiting CVE-2024-25307 can lead to unauthorized database access, data leakage, and potential data manipulation.