CVE-2024-9091: code-projects Student Record System index.php sql injection
A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument regno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9091?
CVE-2024-9091 has been declared as critical due to the potential for remote exploitation.
How do I fix CVE-2024-9091?
To mitigate CVE-2024-9091, it is recommended to sanitize user inputs and implement parameterized queries for database interactions.
What type of vulnerability is CVE-2024-9091?
CVE-2024-9091 is categorized as an SQL injection vulnerability affecting the Student Record System.
Which version of the software is affected by CVE-2024-9091?
CVE-2024-9091 specifically affects version 1.0 of the Code Projects Student Record System.
Can CVE-2024-9091 be exploited remotely?
Yes, CVE-2024-9091 can be exploited remotely via the manipulation of the regno parameter in the index.php file.