CVE-2024-35468: SQL Injection
Published May 30, 2024
·Updated
A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
Affected Software
1 affected component
Sourcecodester Human Resource Management System
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 30, 2024
CVE Published
via NVD·06:15 PM
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Aug 19, 2024
Data Sourced
via MITRE·02:37 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-35468?
CVE-2024-35468 is considered a high-severity vulnerability due to its potential for remote code execution via SQL injection.
2
How do I fix CVE-2024-35468?
To fix CVE-2024-35468, sanitize and validate all user input, particularly the password parameter, to prevent SQL injection.
3
What type of vulnerability is CVE-2024-35468?
CVE-2024-35468 is classified as a SQL injection vulnerability.
4
Who is affected by CVE-2024-35468?
CVE-2024-35468 affects users of SourceCodester Human Resource Management System version 1.0.
5
What can attackers do with CVE-2024-35468?
Attackers can execute arbitrary SQL commands through the password parameter, potentially gaining unauthorized access to the database.