CVE-2024-6371: itsourcecode Pool of Bethesda Online Reservation System controller.php sql injection
A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file controller.php. The manipulation of the argument rmtypeid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269804.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6371?
CVE-2024-6371 is classified as a critical vulnerability.
How does CVE-2024-6371 affect the Pool of Bethesda Online Reservation System?
CVE-2024-6371 allows for SQL injection through manipulation of the rmtype_id argument in controller.php.
What version of the software is impacted by CVE-2024-6371?
CVE-2024-6371 affects version 1.0 of the Pool of Bethesda Online Reservation System.
How can I fix CVE-2024-6371?
To fix CVE-2024-6371, update the Pool of Bethesda Online Reservation System to a patched version that resolves the SQL injection vulnerability.
Is there a known exploit for CVE-2024-6371?
Yes, there are known exploits that leverage the SQL injection vulnerability present in CVE-2024-6371.