CVE-2024-33962: SQL injection in Janobe products

Published Aug 6, 2024

Updated

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/modreservation/index.php' parameter.

Affected Software

5 affected components

Janobe Credit Card=1.0

Janobe Debit Card Payment=1.0

Janobe PayPal=1.0

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·11:19 AM

Data Sourced

via MITRE·11:19 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33962?

CVE-2024-33962 has a high severity rating due to its potential for SQL injection attacks.

How do I fix CVE-2024-33962?

To fix CVE-2024-33962, update the affected Janobe products to the latest patched version not containing the vulnerability.

Which versions of Janobe products are affected by CVE-2024-33962?

CVE-2024-33962 affects version 1.0 of Janobe Credit Card, Debit Card Payment, Paypal, School Attendance Monitoring System, and School Event Management System.

What kind of attack can be executed using CVE-2024-33962?

An attacker can execute SQL injection attacks using CVE-2024-33962 to retrieve sensitive information from the database.

Is there public awareness of CVE-2024-33962?

Yes, CVE-2024-33962 is noted in security advisories which raise awareness of the vulnerability and its risks.