CVE-2024-33972: SQL injection in Janobe products

Published Aug 6, 2024

Updated

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'events' in '/report/eventprint.php' parameter.

Affected Software

5 affected components

Janobe Credit Card=1.0

Janobe Debit Card Payment=1.0

Janobe PayPal=1.0

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·11:56 AM

Data Sourced

via MITRE·11:56 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33972?

The severity of CVE-2024-33972 is classified as critical due to the potential for exploitation via SQL injection.

How do I fix CVE-2024-33972?

To fix CVE-2024-33972, it is recommended to update all affected Janobe products to their latest versions.

What versions are affected by CVE-2024-33972?

CVE-2024-33972 affects Janobe products that are version 1.0, including PayPal, Credit Card, and Debit Card Payment modules.

What kind of attacks can CVE-2024-33972 enable?

CVE-2024-33972 can enable attackers to perform SQL injection, potentially allowing them to access or manipulate sensitive data.

Is CVE-2024-33972 a common vulnerability?

CVE-2024-33972 is a specific vulnerability impacting certain Janobe products and is categorized as a significant security concern.