CVE-2024-48465: SQL Injection
Published Oct 28, 2024
·Updated
The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter
Affected Software
1 affected component
MRBS MRBS
Event History
Oct 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48465?
The severity of CVE-2024-48465 is considered high due to its SQL injection implications.
2
How do I fix CVE-2024-48465?
To fix CVE-2024-48465, sanitize user inputs in the edit_entry_handler.php file to prevent SQL injection.
3
What specific component is affected by CVE-2024-48465?
CVE-2024-48465 affects the edit_entry_handler.php file in MRBS version 1.5.0.
4
Can CVE-2024-48465 lead to data breach?
Yes, CVE-2024-48465 can potentially lead to unauthorized access and data breaches through SQL injection.
5
Is there a patch available for CVE-2024-48465?
As of now, there is no official patch for CVE-2024-48465; users are advised to implement input validation manually.