CVE-2024-50971: SQL Injection
Published Nov 13, 2024
·Updated
A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter.
Affected Software
1 affected component
Angeljudesuarez Construction Management System=1.0
Event History
Nov 13, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-50971?
CVE-2024-50971 is classified as a critical SQL injection vulnerability.
2
How do I fix CVE-2024-50971?
To fix CVE-2024-50971, sanitize and validate all inputs for the map_id parameter to prevent SQL injection.
3
What systems are affected by CVE-2024-50971?
CVE-2024-50971 affects Itsourcecode Construction Management System version 1.0.
4
Can CVE-2024-50971 lead to data loss?
Yes, exploiting CVE-2024-50971 can allow attackers to execute arbitrary SQL commands, potentially resulting in data loss.
5
How can I detect if my system is vulnerable to CVE-2024-50971?
You can detect CVE-2024-50971 by testing your application for SQL injection vulnerabilities specifically targeting the map_id parameter.