CVE-2024-6966: itsourcecode Online Blood Bank Management System Login login.php sql injection
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272120.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6966?
CVE-2024-6966 is classified as a critical vulnerability.
How do I fix CVE-2024-6966?
To fix CVE-2024-6966, validate and sanitize all user inputs in the login.php file to prevent SQL injection.
What component is affected by CVE-2024-6966?
CVE-2024-6966 affects the login functionality of the Online Blood Bank Management System 1.0.
What type of vulnerability is CVE-2024-6966?
CVE-2024-6966 is an SQL injection vulnerability.
Which software version is impacted by CVE-2024-6966?
CVE-2024-6966 impacts version 1.0 of the Adonesevangelista Online Blood Bank Management System.