CVE-2024-33960: SQL injection in Janobe products

Published Aug 6, 2024

Updated

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in '/admin/modreports/printreport.php' parameter.

Affected Software

3 affected components

Janobe Credit Card=1.0

Janobe Debit Card Payment=1.0

Janobe PayPal=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·11:17 AM

Data Sourced

via MITRE·11:17 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33960?

CVE-2024-33960 is classified as a critical SQL injection vulnerability.

How do I fix CVE-2024-33960?

To fix CVE-2024-33960, update the affected Janobe products to the latest version that addresses this vulnerability.

What software is affected by CVE-2024-33960?

CVE-2024-33960 affects Janobe Credit Card, Debit Card Payment, and PayPal products, all version 1.0.

What type of attack can be executed using CVE-2024-33960?

An attacker can perform SQL injection attacks that may allow them to retrieve all information stored in the database.

Is CVE-2024-33960 easy to exploit?

Yes, CVE-2024-33960 can be exploited by sending specially crafted queries to the server.