CVE-2024-8147: code-projects Pharmacy Management System index.php sql injection

Published Aug 25, 2024

Updated

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Pharmacy Management System Project Pharmacy Management System=1.0

Event History

Aug 25, 2024

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Dec 5, 56679

Event

via FIRST·11:57 PM

Frequently Asked Questions

What is the severity of CVE-2024-8147?

CVE-2024-8147 is classified as a critical vulnerability.

How does CVE-2024-8147 affect Pharmacy Management System 1.0?

CVE-2024-8147 allows for SQL injection through the manipulation of the id argument in the /index.php?action=editPharmacist file.

What kind of attack can be executed using CVE-2024-8147?

An attacker can initiate a remote SQL injection attack using CVE-2024-8147.

Is there a specific version of Pharmacy Management System affected by CVE-2024-8147?

Yes, CVE-2024-8147 specifically affects Pharmacy Management System version 1.0.

How can I mitigate the risk of CVE-2024-8147?

To mitigate CVE-2024-8147, it is recommended to apply updates or patches provided by the software vendor.