CVE-2024-7449: SQL Injection
A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273540.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7449?
CVE-2024-7449 is classified as a critical vulnerability.
How does CVE-2024-7449 affect the Placement Management System?
CVE-2024-7449 affects the login.php file, allowing for SQL injection through the email argument.
Can CVE-2024-7449 be exploited remotely?
Yes, CVE-2024-7449 can be exploited remotely, making it a significant security risk.
What software versions are affected by CVE-2024-7449?
CVE-2024-7449 affects Placement Management System version 1.0.
How do I fix CVE-2024-7449?
To fix CVE-2024-7449, it is recommended to validate and sanitize all input fields, particularly the email argument.