CVE-2024-9009: code-projects Online Quiz Site showtest.php sql injection
Published Sep 19, 2024
·Updated
A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Fabian Online Quiz Site=1.0
Event History
Sep 19, 2024
CVE Published
via MITRE·11:31 PM
Data Sourced
via MITRE·11:31 PM
DescriptionSeverityWeakness
Sep 20, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-9009?
CVE-2024-9009 is classified as a critical vulnerability.
2
How do I fix CVE-2024-9009?
To remediate CVE-2024-9009, it is essential to sanitize and validate the input for the 'subid' parameter in showtest.php to prevent SQL injection.
3
What type of vulnerability is CVE-2024-9009?
CVE-2024-9009 is an SQL injection vulnerability.
4
Can CVE-2024-9009 be exploited remotely?
Yes, CVE-2024-9009 can be exploited remotely by manipulating the 'subid' parameter.
5
Which software is affected by CVE-2024-9009?
CVE-2024-9009 affects version 1.0 of the Online Quiz Site by Fabianros.