CVE-2024-8173: code-projects Blood Bank System Login Page login.php sql injection
Published Aug 26, 2024
·Updated
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file /login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Blood Bank System Project Blood Bank System=1.0
Event History
Aug 26, 2024
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Dec 5, 56679
Event
via FIRST·11:52 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-8173?
CVE-2024-8173 is classified as a critical vulnerability.
2
How do I fix CVE-2024-8173?
To fix CVE-2024-8173, sanitize and validate user inputs in the /login.php file to prevent SQL injection.
3
What component is affected by CVE-2024-8173?
CVE-2024-8173 affects the Login Page component of the Blood Bank System 1.0.
4
Which version of Blood Bank System is vulnerable to CVE-2024-8173?
CVE-2024-8173 specifically affects Blood Bank System version 1.0.
5
What type of attack can be performed due to CVE-2024-8173?
CVE-2024-8173 allows attackers to perform SQL injection attacks through the user argument.