CVE-2024-25867: SQL Injection
A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the addtype.php component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25867?
CVE-2024-25867 is characterized as a high severity SQL Injection vulnerability that could lead to unauthorized SQL command execution.
How do I fix CVE-2024-25867?
To mitigate CVE-2024-25867, input validation and parameterized queries should be implemented in the add_type.php component.
What components are impacted by CVE-2024-25867?
CVE-2024-25867 affects the add_type.php component of the CodeAstro Membership Management System version 1.0.
Can CVE-2024-25867 be exploited remotely?
Yes, CVE-2024-25867 can be exploited by a remote attacker through specially crafted requests.
What parameters are involved in CVE-2024-25867?
The parameters involved in exploiting CVE-2024-25867 are membershipType and membershipAmount in the add_type.php component.