CVE-2024-40443: SQL Injection
Published Nov 13, 2024
·Updated
SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the deleteusers function in the Useres.php
Affected Software
2 affected components
Simple Laboratory Management System Simple Laboratory Management System
oretnom23 Computer Laboratory Management System=1.0
Event History
Nov 13, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-40443?
CVE-2024-40443 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2024-40443?
To fix CVE-2024-40443, validate and sanitize user inputs in the delete_users function to prevent SQL injection attacks.
3
Who is affected by CVE-2024-40443?
CVE-2024-40443 affects users of Simple Laboratory Management System using PHP and MySQL version 1.0.
4
Can CVE-2024-40443 lead to data loss?
Yes, CVE-2024-40443 can potentially lead to data loss through unauthorized deletion of user data.
5
Is CVE-2024-40443 a remote exploit?
Yes, attackers can exploit CVE-2024-40443 remotely via the delete_users function.