CVE-2024-33974: SQL injection in Janobe products
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33974?
CVE-2024-33974 has been classified as a high-severity vulnerability due to its potential to expose sensitive user data.
How do I fix CVE-2024-33974?
To fix CVE-2024-33974, update the Janobe School Attendance Monitoring System and Janobe School Event Management System to the latest version.
What types of information can be accessed through CVE-2024-33974?
An attacker exploiting CVE-2024-33974 could retrieve all information stored in the database, including user data.
Which software is affected by CVE-2024-33974?
CVE-2024-33974 affects Janobe School Attendance Monitoring System and Janobe School Event Management System, both version 1.0.
What attack vector does CVE-2024-33974 use?
CVE-2024-33974 uses SQL injection as the attack vector to exploit the vulnerabilities in the affected systems.