CVE-2024-33961: SQL injection in Janobe products

Published Aug 6, 2024

Updated

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/modreservation/controller.php' parameter.

Affected Software

5 affected components

Janobe Credit Card=1.0

Janobe Debit Card Payment=1.0

Janobe PayPal=1.0

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·11:18 AM

Data Sourced

via MITRE·11:18 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33961?

CVE-2024-33961 is classified as a high severity SQL injection vulnerability.

How do I fix CVE-2024-33961?

To mitigate CVE-2024-33961, it is recommended to upgrade to the latest secure version of the affected Janobe software.

What systems are affected by CVE-2024-33961?

CVE-2024-33961 affects Janobe's Credit Card, Debit Card Payment, PayPal, School Attendance Monitoring System, and School Event Management System, all at version 1.0.

How can CVE-2024-33961 be exploited?

An attacker can exploit CVE-2024-33961 by sending a specially crafted SQL query to the server.

What kind of information can be retrieved through CVE-2024-33961?

Exploitation of CVE-2024-33961 could allow an attacker to retrieve all information stored in the vulnerable database.