CVE-2024-57035: SQL Injection
Published Jan 17, 2025
·Updated
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php.
Affected Software
2 affected components
WeGIA WeGIA
WeGIA WeGIA=3.2.0
Event History
Jan 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57035?
CVE-2024-57035 is classified as a critical vulnerability due to its potential for SQL Injection attacks.
2
How do I fix CVE-2024-57035?
To fix CVE-2024-57035, sanitize and validate input for the nextPage parameter in /controle/control.php to prevent SQL injection.
3
Which versions of WeGIA are affected by CVE-2024-57035?
CVE-2024-57035 affects WeGIA version 3.2.0.
4
What are the potential impacts of exploiting CVE-2024-57035?
Exploiting CVE-2024-57035 could allow attackers to execute arbitrary SQL queries, leading to data exposure or manipulation.
5
Is there an official patch for CVE-2024-57035?
As of now, there is no official patch announced for CVE-2024-57035, so it's recommended to apply input validation as a workaround.