CVE-2024-28595: SQL Injection
Published Mar 19, 2024
·Updated
SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php.
Credit
Shubham Pandey
Affected Software
2 affected components
Unknown Employee Management System
Walterjnr1 Employee Management System=1.0
Event History
Mar 19, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Mar 20, 2024
Exploit Published
via ExploitDB·12:00 AM
Known Exploited
via ExploitDB·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-28595?
CVE-2024-28595 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2024-28595?
To fix CVE-2024-28595, validate and sanitize the input from the admin_id parameter to prevent SQL Injection.
3
What software is affected by CVE-2024-28595?
CVE-2024-28595 affects the Employee Management System version 1.0.
4
What kind of attack can be performed using CVE-2024-28595?
An attacker can execute arbitrary SQL commands through the admin_id parameter in update-admin.php.
5
Is CVE-2024-28595 a known vulnerability?
Yes, CVE-2024-28595 is a known vulnerability documented in various security databases.