CVE-2024-7798: SourceCodester Simple Online Bidding System ajax.php sql injection
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=login2. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7798?
CVE-2024-7798 has been declared as critical.
How do I fix CVE-2024-7798?
To fix CVE-2024-7798, update your Simple Online Bidding System to the latest version available.
What software is affected by CVE-2024-7798?
CVE-2024-7798 affects SourceCodester Simple Online Bidding System version 1.0.
What is the nature of the vulnerability in CVE-2024-7798?
CVE-2024-7798 involves the manipulation of an argument within the login functionality of ajax.php.
Are there any known exploits for CVE-2024-7798?
Yes, there are known exploits for CVE-2024-7798 due to its critical severity.