CVE-2024-30983: SQL Injection
Published Apr 17, 2024
·Updated
SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the compname parameter in /edit-computer-detail.php file.
Affected Software
2 affected components
Phpgurukul Cyber Cafe Management System
Phpgurukul Cyber Cafe Management System=1.0
Event History
Apr 17, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-30983?
CVE-2024-30983 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2024-30983?
To fix CVE-2024-30983, sanitize and validate the 'compname' parameter to prevent arbitrary SQL command execution.
3
Which versions are affected by CVE-2024-30983?
CVE-2024-30983 affects version 1.0 of the phpgurukul Cyber Cafe Management System.
4
What are the potential impacts of CVE-2024-30983?
Exploitation of CVE-2024-30983 can lead to unauthorized access to the database and exposure of sensitive data.
5
Where is CVE-2024-30983 found in the code?
CVE-2024-30983 is found in the /edit-computer-detail.php file, specifically in the handling of the 'compname' parameter.