CVE-2024-2776: Campcodes Online Marriage Registration System search.php sql injection
First published: Thu Mar 21 2024(Updated: )
A vulnerability, which was classified as critical, was found in Campcodes Online Marriage Registration System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257610 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Marriage Registration System | =1.0 | |
| Online Marriage Registration System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2776?
CVE-2024-2776 is classified as a critical vulnerability due to its potential for SQL injection.
How does CVE-2024-2776 exploit the Campcodes Online Marriage Registration System?
CVE-2024-2776 exploits the system by manipulating the searchdata argument in the /admin/search.php file to execute SQL injection attacks.
Which version of the Campcodes Online Marriage Registration System is affected by CVE-2024-2776?
CVE-2024-2776 affects the Campcodes Online Marriage Registration System version 1.0.
How can I mitigate the risks of CVE-2024-2776?
To mitigate CVE-2024-2776, validate and sanitize user inputs, particularly in the searchdata parameter.
Is CVE-2024-2776 publicly known?
Yes, CVE-2024-2776 is a publicly known vulnerability that has been documented and reported.
- agent/references
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/event
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/campcodes
- canonical/online marriage registration system
- version/online marriage registration system/1.0