CVE-2024-31546: SQL Injection
Published Apr 19, 2024
·Updated
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php.
Affected Software
2 affected components
Computer Laboratory Management System Computer Laboratory Management System
oretnom23 Computer Laboratory Management System=1.0
Event History
Apr 19, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-31546?
CVE-2024-31546 is considered a high severity vulnerability due to its potential for SQL Injection exploitation.
2
How do I fix CVE-2024-31546?
To fix CVE-2024-31546, ensure that user inputs, especially the "id" parameter, are properly sanitized and use prepared statements to prevent SQL Injection.
3
What systems are affected by CVE-2024-31546?
CVE-2024-31546 affects Computer Laboratory Management System version 1.0.
4
What types of attacks can be performed using CVE-2024-31546?
CVE-2024-31546 can be exploited to perform unauthorized database queries, potentially allowing attackers to access, modify, or delete data.
5
How can I determine if my application is vulnerable to CVE-2024-31546?
You can determine if your application is vulnerable by testing the "id" parameter of /admin/damage/view_damage.php for SQL injection flaws.