CVE-2024-8138: code-projects Pharmacy Management System Parameter index.php editManager sql injection

Published Aug 25, 2024

Updated

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected Software

1 affected component

Pharmacy Management System Project Pharmacy Management System=1.0

Event History

Aug 25, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-8138?

CVE-2024-8138 is classified as a critical vulnerability.

What software is affected by CVE-2024-8138?

CVE-2024-8138 affects Pharmacy Management System version 1.0.

How do I fix CVE-2024-8138?

To fix CVE-2024-8138, you should update to the latest version of the Pharmacy Management System that addresses this vulnerability.

What component is vulnerable in CVE-2024-8138?

The vulnerability in CVE-2024-8138 is found in the editManager function of the Parameter Handler in the file /index.php.

What type of vulnerability is CVE-2024-8138?

CVE-2024-8138 is an input manipulation vulnerability that can lead to unauthorized actions.