CVE-2024-9317: SourceCodester Online Eyewear Shop Master.php delete_category sql injection
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function deletecategory of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9317?
CVE-2024-9317 is classified as a critical vulnerability.
How does CVE-2024-9317 affect the Online Eyewear Shop?
CVE-2024-9317 allows for SQL injection through the delete_category function in the Master.php file.
How do I fix CVE-2024-9317?
To fix CVE-2024-9317, sanitize inputs in the delete_category function to prevent SQL injection.
What systems are impacted by CVE-2024-9317?
CVE-2024-9317 affects SourceCodester Online Eyewear Shop version 1.0.
Can CVE-2024-9317 be exploited?
Yes, CVE-2024-9317 can be exploited by manipulating the id argument in SQL queries.