CVE-2024-2927: code-projects Mobile Shop Login Page Details.php sql injection
A vulnerability was found in code-projects Mobile Shop 1.0. It has been classified as critical. Affected is an unknown function of the file Details.php of the component Login Page. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258000.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2927?
CVE-2024-2927 has been classified as critical due to its potential for SQL injection.
How do I fix CVE-2024-2927?
To fix CVE-2024-2927, validate and sanitize user inputs in the login page to prevent SQL injection.
Which software is affected by CVE-2024-2927?
CVE-2024-2927 affects version 1.0 of the code-projects Mobile Shop software.
What kind of attack can be performed using CVE-2024-2927?
CVE-2024-2927 allows for remote SQL injection attacks through manipulation of the id parameter in the Details.php file.
Is CVE-2024-2927 known to be exploited in the wild?
There are currently no public reports confirming active exploitation of CVE-2024-2927.