CVE-2024-48580: SQL Injection
Published Oct 25, 2024
·Updated
SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request.
Affected Software
2 affected components
Best courier management system
Mayurik Best Courier Management System=1.0
Event History
Oct 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48580?
CVE-2024-48580 is classified as a high-severity SQL Injection vulnerability that allows remote code execution.
2
How do I fix CVE-2024-48580?
To fix CVE-2024-48580, validate and sanitize user input for the email parameter in the login request of the Best Courier Management System.
3
What software is affected by CVE-2024-48580?
CVE-2024-48580 affects Best Courier Management System in PHP version 1.0.
4
Can CVE-2024-48580 be exploited remotely?
Yes, CVE-2024-48580 can be exploited remotely by attackers through the email parameter in the login request.
5
What type of vulnerability is CVE-2024-48580?
CVE-2024-48580 is an SQL Injection vulnerability, which allows attackers to execute arbitrary SQL commands.