CVE-2024-9037: Codezips Internal Marks Calculation index.php sql injection
Published Sep 20, 2024
·Updated
A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Codezips Internal Marks Calculation
Codezips Internal Marks Calculation=1.0
Event History
Sep 20, 2024
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-9037?
CVE-2024-9037 is classified as a critical vulnerability.
2
How does CVE-2024-9037 affect the Codezips Internal Marks Calculation software?
CVE-2024-9037 affects the unknown function of the file index.php, leading to SQL injection vulnerabilities.
3
Can CVE-2024-9037 be exploited remotely?
Yes, CVE-2024-9037 can be exploited remotely.
4
What type of attack is associated with CVE-2024-9037?
CVE-2024-9037 is associated with SQL injection attacks.
5
What should be done to mitigate CVE-2024-9037?
To mitigate CVE-2024-9037, it is important to validate and sanitize user inputs to prevent SQL injection.