CVE-2024-4972: code-projects Simple Chat System login.php sql injection
Published May 16, 2024
·Updated
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264537 was assigned to this vulnerability.
Affected Software
2 affected components
Code-projects Simple Chat System=1.0
Code-projects Simple Chat System
Event History
May 16, 2024
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Apr 5, 58462
Event
via NVD·10:41 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-4972?
CVE-2024-4972 is classified as a critical vulnerability.
2
How do I fix CVE-2024-4972?
To fix CVE-2024-4972, sanitize and validate user inputs in the login process to prevent SQL injection.
3
What component is affected by CVE-2024-4972?
CVE-2024-4972 affects the /login.php file in Simple Chat System version 1.0.
4
Can CVE-2024-4972 be exploited remotely?
Yes, CVE-2024-4972 can be exploited remotely.
5
What kind of vulnerability is CVE-2024-4972?
CVE-2024-4972 is a SQL injection vulnerability.