CVE-2024-25312: SQL Injection
Published Feb 9, 2024
·Updated
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/subdelete.php?id=5."
Affected Software
1 affected component
Code-projects Simple School Management System=1.0
Event History
Feb 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Aug 19, 56091
Event
via FIRST·05:56 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-25312?
CVE-2024-25312 has been classified as a critical vulnerability due to its potential to allow unauthorized access to the database.
2
How do I fix CVE-2024-25312?
The vulnerability CVE-2024-25312 can be remedied by implementing parameterized queries or prepared statements to eliminate the risk of SQL injection.
3
Which versions are affected by CVE-2024-25312?
CVE-2024-25312 affects version 1.0 of the Simple School Management System.
4
What type of vulnerability is CVE-2024-25312?
CVE-2024-25312 is categorized as an SQL Injection vulnerability, which allows attackers to manipulate database queries.
5
Where is CVE-2024-25312 exploited?
CVE-2024-25312 can be exploited via the 'id' parameter in the 'School/sub_delete.php' script.