CVE-2024-25310: SQL Injection
Published Feb 9, 2024
·Updated
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
Affected Software
1 affected component
Code-projects Simple School Management System=1.0
Event History
Feb 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
May 4, 56090
Event
via FIRST·02:17 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-25310?
CVE-2024-25310 has a high severity rating due to its potential to allow unauthorized database access through SQL injection.
2
How do I fix CVE-2024-25310?
To fix CVE-2024-25310, validate and sanitize user inputs to the 'id' parameter before processing them in the SQL query.
3
What are the potential impacts of CVE-2024-25310?
The potential impacts of CVE-2024-25310 include data leakage, data manipulation, or unauthorized access to sensitive information.
4
Which systems are affected by CVE-2024-25310?
CVE-2024-25310 affects Simple School Management System version 1.0 installed on servers that do not apply necessary security measures.
5
Is CVE-2024-25310 exploitable remotely?
Yes, CVE-2024-25310 is remotely exploitable as it can be triggered through a malicious request to the vulnerable URL.