CVE-2024-40072: SQL Injection
Published Apr 16, 2025
·Updated
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1.
Affected Software
2 affected components
Sourcecodester Online ID Generator System
oretnom23 Online Id Generator System=1.0
Event History
Apr 16, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-40072?
The severity of CVE-2024-40072 is considered high due to the potential for unauthorized access to the database.
2
How do I fix CVE-2024-40072?
To fix CVE-2024-40072, sanitize and validate the 'id' parameter to prevent SQL injection attacks.
3
What is the impact of CVE-2024-40072?
The impact of CVE-2024-40072 allows attackers to execute arbitrary SQL commands, which can lead to data theft or manipulation.
4
Is CVE-2024-40072 exploitable remotely?
Yes, CVE-2024-40072 is exploitable remotely, allowing attackers to exploit the vulnerability over the internet.
5
Can CVE-2024-40072 be mitigated by using prepared statements?
Yes, using prepared statements can effectively mitigate the risk of CVE-2024-40072 by preventing SQL injection.