First published: Tue Oct 01 2024(Updated: )
A vulnerability was found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /addcompany.php. The manipulation of the argument company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
code-projects Restaurant Reservation System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-9359 is classified as a critical vulnerability due to its potential for SQL injection.
Fix CVE-2024-9359 by validating and sanitizing user inputs to the /addcompany.php file and implementing prepared statements in the database queries.
CVE-2024-9359 allows attackers to execute arbitrary SQL commands, potentially compromising the database and exposing sensitive information.
CVE-2024-9359 affects version 1.0 of the code-projects Restaurant Reservation System.
Yes, CVE-2024-9359 can be exploited remotely, allowing attackers to manipulate the affected functionality.