CVE-2024-51327: SQL Injection
Published Nov 4, 2024
·Updated
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
Affected Software
1 affected component
Projectworlds Travel management System=1.0
Event History
Nov 4, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51327?
CVE-2024-51327 is considered a critical vulnerability due to its potential for authentication bypass using SQL Injection.
2
How do I fix CVE-2024-51327?
To fix CVE-2024-51327, ensure that input parameters in the login form are properly sanitized and use prepared statements for database queries.
3
Which software is affected by CVE-2024-51327?
CVE-2024-51327 affects ProjectWorld's Travel Management System version 1.0.
4
Can CVE-2024-51327 be exploited remotely?
Yes, CVE-2024-51327 can be exploited remotely by attackers to bypass authentication.
5
What fields are vulnerable in CVE-2024-51327?
The 'username' and 'password' fields in loginform.php are vulnerable in CVE-2024-51327.