CVE-2024-6065: itsourcecode Bakery Online Ordering System index.php sql injection
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268793 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6065?
CVE-2024-6065 has been rated as critical.
How does CVE-2024-6065 manifest?
CVE-2024-6065 manifests through SQL injection due to improper handling of the user_email argument in index.php.
Can CVE-2024-6065 be exploited remotely?
Yes, the attack associated with CVE-2024-6065 may be initiated remotely.
Which software is affected by CVE-2024-6065?
CVE-2024-6065 affects the Janobe Bakery Online Ordering System version 1.0.
How do I fix CVE-2024-6065?
To fix CVE-2024-6065, ensure that user input is properly sanitized and validated before processing.