CVE-2024-8138: code-projects Pharmacy Management System Parameter index.php editManager sql injection
First published: Sun Aug 25 2024(Updated: )
A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pharmacy Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-8138?
CVE-2024-8138 is classified as a critical vulnerability.
What software is affected by CVE-2024-8138?
CVE-2024-8138 affects Pharmacy Management System version 1.0.
How do I fix CVE-2024-8138?
To fix CVE-2024-8138, you should update to the latest version of the Pharmacy Management System that addresses this vulnerability.
What component is vulnerable in CVE-2024-8138?
The vulnerability in CVE-2024-8138 is found in the editManager function of the Parameter Handler in the file /index.php.
What type of vulnerability is CVE-2024-8138?
CVE-2024-8138 is an input manipulation vulnerability that can lead to unauthorized actions.
- agent/weakness
- agent/references
- agent/title
- agent/first-publish-date
- agent/description
- agent/type
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/pharmacy management system project
- canonical/pharmacy management system
- version/pharmacy management system/1.0