CVE-2024-55496: SQL Injection
A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55496?
CVE-2024-55496 has been rated as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2024-55496?
To fix CVE-2024-55496, sanitize and validate user inputs in the add_company.php file to prevent SQL injection attacks.
What affected software versions are impacted by CVE-2024-55496?
CVE-2024-55496 affects version 1.0 of the 1000projects Bookstore Management System PHP MySQL Project.
What is the exploitability of CVE-2024-55496?
CVE-2024-55496 is easily exploitable through unauthorized access to the delete parameter in add_company.php.
Is there a patch available for CVE-2024-55496?
As of now, there is no official patch for CVE-2024-55496, so manual code remediation is recommended.