CVE-2024-37840: SQL Injection
Published Jun 17, 2024
·Updated
SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.
Affected Software
2 affected components
itsourcecode Learning Management System Project
itsourcecode Learning Management System=1.0
Event History
Jun 17, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37840?
CVE-2024-37840 is considered a high severity SQL injection vulnerability.
2
How do I fix CVE-2024-37840?
To fix CVE-2024-37840, sanitize user inputs in the LessonID parameter to prevent SQL injection.
3
What systems are impacted by CVE-2024-37840?
CVE-2024-37840 affects the Itsourcecode Learning Management System Project in PHP version 1.0.
4
Can CVE-2024-37840 be exploited remotely?
Yes, CVE-2024-37840 can be exploited remotely by an attacker to execute arbitrary SQL commands.
5
What are the potential risks of CVE-2024-37840 being exploited?
Exploitation of CVE-2024-37840 could lead to unauthorized data access, data manipulation, or complete database compromise.